Skip to content
Sign in
6.5 Medium

CVE-2025-13867 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0…

Description

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.3 could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in data query logic

Affected products and versions

Product Affected versions Fixed in
DB2 for Linux, UNIX and Windows 12.1 12.1.0 → 12.1.3 No fix stated
DB2 for Linux, UNIX and Windows 11.5 11.5.0 → 11.5.9 No fix stated

Other CVEs of DB2 for Linux, UNIX and Windows

The 168 CVEs of DB2 for Linux, UNIX and Windows →
CVE-2025-36247 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.3 is… 7.1 High CVE-2025-36425 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.3… 5.3 Medium CVE-2025-14689 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 12.1.0 through 12.1.3 could allow an authenticated… 6.5 Medium CVE-2025-2668 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 is vulnerable to a denial of service… 6.5 Medium
Track this CVE