Skip to content

Known vulnerabilities in IBM DB2

Is your version affected?

CVE Summary Score Published
CVE-2026-6938 IBM Db2 12.1.0 through 12.1.4 is vulnerable to authorization bypass when uploading to a remote object storage path… 6.5 Medium May 27, 2026
CVE-2026-6053 IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a denial of service when a specially crafted… 5.5 Medium May 27, 2026
CVE-2026-6052 IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to running out of memory when executing certain… 6.5 Medium May 27, 2026
CVE-2026-6051 IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a denial of service when executing a specially… 5.5 Medium May 27, 2026
CVE-2026-1718 IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a denial of service with a specially crafted… 7.1 High May 27, 2026
CVE-2025-13755 IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes DB2 Connect Server)… 5.5 Medium May 26, 2026
CVE-2026-1577 IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could… 6.5 Medium Apr 30, 2026
CVE-2025-36122 IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes DB2 Connect Server) could… 6.5 Medium Apr 30, 2026
CVE-2025-14688 IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) could… 5.3 Medium Apr 30, 2026
CVE-2026-1352 IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could… 6.5 Medium Apr 22, 2026
CVE-2025-36006 IBM Db2 10.5.0 through 10.5.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux,… 6.5 Medium Nov 7, 2025
CVE-2025-36008 IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) could… 6.5 Medium Nov 7, 2025
CVE-2025-36131 IBM Db2 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows… 4.6 Medium Nov 7, 2025
CVE-2025-36136 IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes DB2 Connect Server) could… 5.1 Medium Nov 7, 2025
CVE-2025-36185 IBM Db2 12.1.0 through 12.1.2 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow a local user to… 6.2 Medium Nov 7, 2025
CVE-2025-36186 IBM Db2 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) under specific configurations… 7.4 High Nov 7, 2025
CVE-2025-33012 IBM Db2 10.5.0 through 10.5.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux… 6.3 Medium Nov 7, 2025
CVE-2025-2534 IBM Db2 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows… 5.3 Medium Nov 7, 2025
CVE-2024-47118 IBM Db2 10.5.0 through 10.5.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux,… 6.5 Medium Nov 7, 2025
CVE-2024-49828 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5.0.0 through 10.5.0.11, 11.1.0 through 11.1.4.7,… 6.5 Medium Jul 29, 2025
CVE-2024-51473 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5.0.0 through 10.5.0.11, 11.1.0 through 11.1.4.7,… 6.5 Medium Jul 29, 2025
CVE-2024-52894 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5.0.0 through 10.5.0.11, 11.1.0 through 11.1.4.7,… 4.9 Medium Jul 29, 2025
CVE-2025-33114 IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 is vulnerable to denial of service with a specially crafted query under… 5.3 Medium Jul 29, 2025
CVE-2025-33092 IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 is vulnerable to a stack-based buffer overflow in db2fm, caused by… 7.8 High Jul 29, 2025
CVE-2025-36010 IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 could allow an unauthenticated user to cause a denial of service due to… 6.5 Medium Jul 29, 2025

Other IBM products