Db2
IBM- Product type
- Other
- Catalog vulnerabilities
- 350
Severity across 42 analyzed records
en
Verify to analyze this security profile
As of 09/13/2026, within CyStack's analyzed data, Db2 has 15 security vulnerabilities published in the last 90 days. Of these, 7 are rated High or Critical. None of these vulnerabilities is listed in the CISA KEV catalog. CyStack recommends that organizations and individual users remediate applicable vulnerabilities as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Db2 and determine which vulnerabilities affect that version.
| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-86087IBM® Db2® could allow an authenticated user to send a specially crafted request to write arbitrary files on the system | Exploitation statusNot known exploited | FixYes | Published09/10/2026 | SeverityMedium |
CVE-2026-86093IBM® Db2® federated server could allow an attacker with the ability to control or impersonate a DRDA server endpoint to execute arbitrary commands under certain conditions | Exploitation statusNot known exploited | FixYes | Published09/10/2026 | SeverityHigh |
CVE-2026-87958IBM® Db2® is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by a privileged user under certain conditions | Exploitation statusNot known exploited | FixYes | Published09/10/2026 | SeverityHigh |
CVE-2026-10534IBM® Db2® is vulnerable to buffer overflow in the IXF IMPORT parser | Exploitation statusNot known exploited | FixYes | Published08/12/2026 | SeverityHigh |
CVE-2026-10543IBM® Db2® is vulnerable to privilege escalation with a specially crafted query | Exploitation statusNot known exploited | FixYes | Published08/12/2026 | SeverityHigh |
CVE-2026-16480IBM® Db2® is affected by an improper authorization vulnerability in the certain command, allowing a non-privileged user to bypass authority checks and modify database catalog data. | Exploitation statusNot known exploited | FixYes | Published08/12/2026 | SeverityMedium |
CVE-2026-18097IBM® Db2® federated server could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files. | Exploitation statusNot known exploited | FixYes | Published08/12/2026 | SeverityMedium |
CVE-2026-18096IBM® Db2® could allow a local attacker to cause a denial of service due to a memory leak | Exploitation statusNot known exploited | FixYes | Published08/12/2026 | SeverityLow |
CVE-2026-10535IBM® Db2® is vulnerable to buffer overflow in setgid helper db2flacc which can lead to privilege escalation and instance compromise from an unprivileged shell | Exploitation statusNot known exploited | FixYes | Published07/30/2026 | SeverityHigh |
CVE-2026-10695IBM® Db2® is vulnerable to a denial of service when running non fenced federated queries | Exploitation statusNot known exploited | FixYes | Published07/30/2026 | SeverityMedium |
CVE-2026-7771IBM® Db2® is vulnerable to a trap when compiling specially crafted statements containing subqueries could lead to a denial of service | Exploitation statusNot known exploited | FixYes | Published07/17/2026 | SeverityMedium |
CVE-2026-9762IBM® Data Server driver for JDBC and SQLJ is vulnerable to remote code execution when jdbc url is under user control | Exploitation statusNot known exploited | FixYes | Published07/17/2026 | SeverityHigh |
CVE-2025-36372IBM® Db2® could disclose sensitive information to an authenticated user from the monitoring and event tables | Exploitation statusNot known exploited | FixYes | Published06/30/2026 | SeverityMedium |
CVE-2026-10109IBM® Db2® is vulnerable to remote code execution due to improper pre-auth DRDA handshake handling | Exploitation statusNot known exploited | FixYes | Published06/30/2026 | SeverityCritical |
CVE-2026-11906IBM® Db2® federated server is vulnerable to a denial of service due to improper neutralization of special elements in the data query logic of XMLTable-derived columns by autheticated user | Exploitation statusNot known exploited | FixYes | Published06/30/2026 | SeverityMedium |
CVE-2023-33854Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data. | Exploitation statusNot known exploited | FixYes | Published06/22/2026 | SeverityMedium |
CVE-2025-2669Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data. | Exploitation statusNot known exploited | FixYes | Published06/22/2026 | SeverityMedium |
CVE-2024-54178Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data. | Exploitation statusNot known exploited | FixYes | Published06/22/2026 | SeverityMedium |
CVE-2026-6938IBM® Db2® is vulnerable to authorization bypass when uploading to a remote object storage path with a special query | Exploitation statusNot known exploited | FixYes | Published05/27/2026 | SeverityMedium |
CVE-2026-6053IBM® Db2® is vulnerable to a denial of service when a specially crafted query is run with range partitioned tables | Exploitation statusNot known exploited | FixYes | Published05/27/2026 | SeverityMedium |
CVE-2026-6052IBM® Db2® is vulnerable to running out of memory when executing certain queries with MDC tables | Exploitation statusNot known exploited | FixYes | Published05/27/2026 | SeverityMedium |
CVE-2026-6051IBM® Db2® is vulnerable to a denial of service when executing a specially crafted query with a small statement heap | Exploitation statusNot known exploited | FixYes | Published05/27/2026 | SeverityMedium |
CVE-2026-1718IBM® Db2® is vulnerable to a denial of service with a specially crafted query when running an AUTONOMOUS procedure | Exploitation statusNot known exploited | FixYes | Published05/27/2026 | SeverityHigh |
CVE-2025-13755IBM® Db2® is vulnerable to credential exposure in db2diag when executing specific testcase buckets | Exploitation statusNot known exploited | FixYes | Published05/26/2026 | SeverityMedium |
CVE-2026-1577IBM® Db2® is vulnerable to a denial of service with a specially crafted query involving multiple subqueries | Exploitation statusNot known exploited | FixYes | Published04/30/2026 | SeverityMedium |
CVE-2025-36122IBM® Db2® is vulnerable to a denial of service with a specially crafted query when stmtheap is set to automatic | Exploitation statusNot known exploited | FixYes | Published04/30/2026 | SeverityMedium |
CVE-2025-14688IBM® Db2® is vulnerable to a denial of service when fetching from certain tables under specific configurations | Exploitation statusNot known exploited | FixYes | Published04/30/2026 | SeverityMedium |
CVE-2026-1352IBM® Db2® is vulnerable to a trap or return SQLCODE -901 when compiling a specially crafted query with a defined index | Exploitation statusNot known exploited | FixYes | Published04/22/2026 | SeverityMedium |
CVE-2025-36247IBM Db2 XML External Entity Reference | Exploitation statusNot known exploited | FixYes | Published02/17/2026 | SeverityHigh |
CVE-2025-36425IBM Db2 Information Disclosure | Exploitation statusNot known exploited | FixYes | Published02/17/2026 | SeverityMedium |
CVE-2025-13867IBM Db2 Denial of Service | Exploitation statusNot known exploited | FixYes | Published02/17/2026 | SeverityMedium |
CVE-2025-14689IBM Db2 Denial of Service | Exploitation statusNot known exploited | FixYes | Published02/17/2026 | SeverityMedium |
CVE-2025-2668IBM Db2 Denial of Service | Exploitation statusNot known exploited | FixYes | Published01/30/2026 | SeverityMedium |
CVE-2025-36001IBM Db2 Denial of Service | Exploitation statusNot known exploited | FixYes | Published01/30/2026 | SeverityMedium |
CVE-2025-36009IBM Db2 Denial of Service | Exploitation statusNot known exploited | FixYes | Published01/30/2026 | SeverityMedium |
CVE-2025-36070IBM Db2 Denial of Service | Exploitation statusNot known exploited | FixYes | Published01/30/2026 | SeverityMedium |
CVE-2025-36098IBM Db2 Denial of Service | Exploitation statusNot known exploited | FixYes | Published01/30/2026 | SeverityMedium |
CVE-2025-36123IBM Db2 Denial of Service | Exploitation statusNot known exploited | FixYes | Published01/30/2026 | SeverityMedium |
CVE-2025-36184IBM Db2 Privilege Escalation | Exploitation statusNot known exploited | FixYes | Published01/30/2026 | SeverityHigh |
CVE-2025-36353IBM Db2 Denial of Service | Exploitation statusNot known exploited | FixYes | Published01/30/2026 | SeverityMedium |
CVE-2025-36365IBM Db2 Privilege Escalation | Exploitation statusNot known exploited | FixYes | Published01/30/2026 | SeverityMedium |
CVE-2025-36366IBM Db2 Denial of Service | Exploitation statusNot known exploited | FixYes | Published01/30/2026 | SeverityMedium |
CVE-2025-36384IBM Db2 Privilege Escalation | Exploitation statusNot known exploited | FixYes | Published01/30/2026 | SeverityHigh |
CVE-2025-36387IBM Db2 Denial of Service | Exploitation statusNot known exploited | FixYes | Published01/30/2026 | SeverityMedium |
CVE-2025-36407IBM Db2 Denial of Service | Exploitation statusNot known exploited | FixYes | Published01/30/2026 | SeverityMedium |
CVE-2025-36423IBM Db2 Denial of Service | Exploitation statusNot known exploited | FixYes | Published01/30/2026 | SeverityMedium |
CVE-2025-36424IBM Db2 Denial of Service | Exploitation statusNot known exploited | FixYes | Published01/30/2026 | SeverityMedium |
CVE-2025-36427IBM Db2 Denial of Service | Exploitation statusNot known exploited | FixYes | Published01/30/2026 | SeverityMedium |
CVE-2025-36428IBM Db2 Denial of Service | Exploitation statusNot known exploited | FixYes | Published01/30/2026 | SeverityMedium |
CVE-2025-36442IBM Db2 Denial of Service | Exploitation statusNot known exploited | FixYes | Published01/30/2026 | SeverityMedium |
CVE-2025-36006IBM Db2 denial of service | Exploitation statusNot known exploited | FixYes | Published11/07/2025 | SeverityMedium |
CVE-2025-36008IBM Db2 denial of service | Exploitation statusNot known exploited | FixYes | Published11/07/2025 | SeverityMedium |
CVE-2025-36131IBM Db2 information disclosure | Exploitation statusNot known exploited | FixYes | Published11/07/2025 | SeverityMedium |
CVE-2025-36136IBM denial of service | Exploitation statusNot known exploited | FixYes | Published11/07/2025 | SeverityMedium |
CVE-2025-36185IBM Db2 denial of service | Exploitation statusNot known exploited | FixYes | Published11/07/2025 | SeverityMedium |
CVE-2025-36186IBM Db2 privilege escalation | Exploitation statusNot known exploited | FixYes | Published11/07/2025 | SeverityHigh |
CVE-2025-33012IBM Db2 improper account lockout | Exploitation statusNot known exploited | FixYes | Published11/07/2025 | SeverityMedium |
CVE-2025-2534IBM Db2 denial of service | Exploitation statusNot known exploited | FixYes | Published11/07/2025 | SeverityMedium |
CVE-2024-47118IBM Db2 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query | Exploitation statusNot known exploited | FixYes | Published11/07/2025 | SeverityMedium |
CVE-2024-49828IBM Db2 for Linux, UNIX and Windows denial of service | Exploitation statusNot known exploited | FixYes | Published07/29/2025 | SeverityMedium |
CVE-2024-51473IBM Db2 for Linux, UNIX and Windows denial of service | Exploitation statusNot known exploited | FixYes | Published07/29/2025 | SeverityMedium |
CVE-2024-52894IBM Db2 for Linux, UNIX and Windows denial of service | Exploitation statusNot known exploited | FixYes | Published07/29/2025 | SeverityMedium |
CVE-2025-33114IBM Db2 for Linux denial of service | Exploitation statusNot known exploited | FixYes | Published07/29/2025 | SeverityMedium |
CVE-2025-33092IBM Db2 for Linux code execution | Exploitation statusNot known exploited | FixYes | Published07/29/2025 | SeverityHigh |
CVE-2025-36071IBM Db2 denial of service | Exploitation statusNot known exploited | FixYes | Published07/29/2025 | SeverityMedium |
CVE-2025-36010IBM Db2 for Linux denial of service | Exploitation statusNot known exploited | FixYes | Published07/29/2025 | SeverityMedium |
CVE-2025-2533IBM Db2 for Linux denial of service | Exploitation statusNot known exploited | FixYes | Published07/29/2025 | SeverityMedium |
CVE-2024-49350IBM Db2 denial of service | Exploitation statusNot known exploited | FixYes | Published05/29/2025 | SeverityMedium |
CVE-2025-2518IBM Db2 denial of service | Exploitation statusNot known exploited | FixYes | Published05/29/2025 | SeverityMedium |
CVE-2025-3050IBM Db2 denial of service | Exploitation statusNot known exploited | FixYes | Published05/29/2025 | SeverityMedium |
CVE-2025-1493IBM Db2 denial of service | Exploitation statusNot known exploited | FixYes | Published05/05/2025 | SeverityMedium |
CVE-2025-0915IBM Db2 denial of service | Exploitation statusNot known exploited | FixYes | Published05/05/2025 | SeverityMedium |
CVE-2025-1000IBM Db2 denial of service | Exploitation statusNot known exploited | FixYes | Published05/05/2025 | SeverityMedium |
CVE-2025-1992IBM Db2 denial of service | Exploitation statusNot known exploited | FixYes | Published05/05/2025 | SeverityMedium |
CVE-2024-52903IBM Db2 denial of service | Exploitation statusNot known exploited | FixYes | Published05/01/2025 | SeverityMedium |
CVE-2024-40679IBM Db2 information disclosure | Exploitation statusNot known exploited | FixNot confirmed | Published01/08/2025 | SeverityMedium |
CVE-2023-30443IBM Db2 denial of service | Exploitation statusNot known exploited | FixNot confirmed | Published12/19/2024 | SeverityMedium |
CVE-2024-41762IBM Db2 denial of service | Exploitation statusNot known exploited | FixNot confirmed | Published12/07/2024 | SeverityMedium |
CVE-2024-37071IBM Db2 denial of service | Exploitation statusNot known exploited | FixNot confirmed | Published12/07/2024 | SeverityMedium |
CVE-2024-41761IBM Db2 denial of service | Exploitation statusNot known exploited | FixNot confirmed | Published11/23/2024 | SeverityMedium |
CVE-2024-45663IBM Db2 denial of service | Exploitation statusNot known exploited | FixNot confirmed | Published11/21/2024 | SeverityMedium |
CVE-2024-31880IBM Db2 denial of service | Exploitation statusNot known exploited | FixNot confirmed | Published10/23/2024 | SeverityMedium |
CVE-2024-31882IBM Db2 denial of service | Exploitation statusNot known exploited | FixNot confirmed | Published08/14/2024 | SeverityMedium |
CVE-2024-37529IBM Db2 denial of service | Exploitation statusNot known exploited | FixNot confirmed | Published08/14/2024 | SeverityMedium |
CVE-2024-35152IBM Db2 denial of service | Exploitation statusNot known exploited | FixNot confirmed | Published08/14/2024 | SeverityMedium |
CVE-2024-35136IBM Db2 denial of service | Exploitation statusNot known exploited | FixNot confirmed | Published08/14/2024 | SeverityMedium |
CVE-2023-29267IBM Db2 denial of service | Exploitation statusNot known exploited | FixNot confirmed | Published06/12/2024 | SeverityMedium |
CVE-2024-31881IBM Db2 denial of service | Exploitation statusNot known exploited | FixNot confirmed | Published06/12/2024 | SeverityMedium |
CVE-2024-28762IBM Db2 denial of service | Exploitation statusNot known exploited | FixNot confirmed | Published06/12/2024 | SeverityMedium |
CVE-2023-42005IBM Db2 on Cloud Pak for Data privilege escalation | Exploitation statusNot known exploited | FixNot confirmed | Published05/29/2024 | SeverityHigh |
CVE-2024-22360IBM Db2 for Linux, UNIX and Windows denial of service | Exploitation statusNot known exploited | FixNot confirmed | Published04/03/2024 | SeverityMedium |
CVE-2023-52296IBM Db2 for Linux, UNIX and Windows denial of service | Exploitation statusNot known exploited | FixNot confirmed | Published04/03/2024 | SeverityMedium |
CVE-2023-38729IBM Db2 information disclosure | Exploitation statusNot known exploited | FixNot confirmed | Published04/03/2024 | SeverityMedium |
CVE-2024-27254IBM Db2 for Linux, UNIX and Windows denial of service | Exploitation statusNot known exploited | FixNot confirmed | Published04/03/2024 | SeverityMedium |
CVE-2024-25046IBM Db2 for Linux, UNIX and Windows denial of service | Exploitation statusNot known exploited | FixNot confirmed | Published04/03/2024 | SeverityMedium |
CVE-2024-25030 | Exploitation statusNot known exploited | FixNot confirmed | Published04/03/2024 | SeverityMedium |
CVE-2023-47141IBM Db2 denial of service | Exploitation statusNot known exploited | FixNot confirmed | Published01/22/2024 | SeverityMedium |
CVE-2023-47158IBM Db2 denial of service | Exploitation statusNot known exploited | FixNot confirmed | Published01/22/2024 | SeverityMedium |
CVE-2023-47152IBM Db2 information disclosure | Exploitation statusNot known exploited | FixNot confirmed | Published01/22/2024 | SeverityMedium |
CVE-2023-27859IBM Db2 code execution | Exploitation statusNot known exploited | FixNot confirmed | Published01/22/2024 | SeverityMedium |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan