Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:db2:12.1.3:*:*:*:*:zos:*:*

part: a version: 12.1.3 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductDb2 (5963772f-bccc-50e2-883c-858291bf5bb7)
Edition*
Language*
Software edition*
Target softwarezos
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-36442 vulnerable 2026-06-08 07:21:01.772132 IBM Db2 Denial of Service
MEDIUM (6.5)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query with XML columns.
Published: 2026-01-30T21:18:24.037Z
Updated: 2026-02-02T16:32:26.688Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36428 vulnerable 2026-06-08 07:21:01.727668 IBM Db2 Denial of Service
MEDIUM (5.3)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in data query logic when the RPSCAN feature is enabled.
Published: 2026-01-30T21:27:26.215Z
Updated: 2026-02-02T16:32:13.261Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36427 vulnerable 2026-06-08 07:21:01.725730 IBM Db2 Denial of Service
MEDIUM (6.5)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow a user to cause a denial of service due to insufficient validation of special elements in data query logic.
Published: 2026-01-30T21:27:31.388Z
Updated: 2026-02-04T17:27:58.864Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36425 vulnerable 2026-06-08 07:21:01.723687 IBM Db2 Information Disclosure
MEDIUM (5.3)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.3 could allow an authenticated user to obtain sensitive information under specific HADR configuration.
Published: 2026-02-17T17:13:03.635Z
Updated: 2026-02-17T19:31:31.869Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36424 vulnerable 2026-06-08 07:21:01.721525 IBM Db2 Denial of Service
MEDIUM (6.5)
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow a user to cause a denial of service due to improper neutralization of special elements in data query logic.
Published: 2026-01-30T21:27:34.569Z
Updated: 2026-02-04T17:28:32.979Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36423 vulnerable 2026-06-08 07:21:01.719722 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36407 vulnerable 2026-06-08 07:21:01.702182 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36387 vulnerable 2026-06-08 07:21:01.683593 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36366 vulnerable 2026-06-08 07:21:01.640924 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36365 vulnerable 2026-06-08 07:21:01.639169 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36353 vulnerable 2026-06-08 07:21:01.577987 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36247 vulnerable 2026-06-08 07:21:01.521506 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36123 vulnerable 2026-06-08 07:21:01.080919 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36098 vulnerable 2026-06-08 07:21:00.954022 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36070 vulnerable 2026-06-08 07:21:00.825273 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36009 vulnerable 2026-06-08 07:21:00.410277 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36001 vulnerable 2026-06-08 07:21:00.260663 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13867 vulnerable 2026-06-08 07:06:32.877825 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.