Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:db2:12.1.5:*:*:*:*:*:*:*
part: a version: 12.1.5 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Db2 (5963772f-bccc-50e2-883c-858291bf5bb7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-18097 |
vulnerable | 2026-09-16 04:34:01.787328 |
IBM® Db2® federated server could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files.
MEDIUM (5.5)
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files.
Published: 2026-08-12T20:48:29.761Z
Updated: 2026-08-14T22:14:38.325Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-18096 |
vulnerable | 2026-09-16 04:34:01.688592 |
IBM® Db2® could allow a local attacker to cause a denial of service due to a memory leak
LOW (3.3)
IBM Db2 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local attacker to cause a denial of service due to a memory leak.
Published: 2026-08-12T20:47:06.726Z
Updated: 2026-08-13T14:08:28.076Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-15955 |
vulnerable | 2026-09-16 04:33:06.351410 |
IBM® Data Server driver for JDBC and SQLJ could allow a remote attacker to perform an arbitrary file write due to improper validation of file paths
HIGH (7.5)
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow a remote attacker to perform an arbitrary file write due to improper validation of file paths.
Published: 2026-09-14T19:58:20.474Z
Updated: 2026-09-15T18:04:58.551Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-17463 |
vulnerable | 2026-09-16 04:33:03.944411 |
IBM® Db2® could allow a remote authenticated attacker to cause a denial of service due to uncontrolled resource consumption
MEDIUM (6.5)
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a remote authenticated attacker to cause a denial of service due to uncontrolled resource consumption.
Published: 2026-09-14T19:40:28.497Z
Updated: 2026-09-14T20:13:31.505Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-87958 |
vulnerable | 2026-09-16 04:33:01.542735 |
IBM® Db2® is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by a privileged user under certain conditions
HIGH (8.1)
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by a privileged user under certain conditions.
Published: 2026-09-10T21:23:45.286Z
Updated: 2026-09-11T14:46:10.646Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-86087 |
vulnerable | 2026-09-16 04:32:58.589004 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-86093 |
vulnerable | 2026-09-16 04:32:58.446544 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-16480 |
vulnerable | 2026-09-16 04:32:57.115189 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-16702 |
vulnerable | 2026-09-16 04:32:56.615112 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-10534 |
vulnerable | 2026-09-16 04:32:43.369147 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-10543 |
vulnerable | 2026-09-16 04:32:43.206725 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.