Skip to content

Known vulnerabilities in IBM DB2

Is your version affected?

CVE Summary Score Published
CVE-2025-2533 IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 is vulnerable to a denial of service as the server may crash under… 5.3 Medium Jul 29, 2025
CVE-2024-40679 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to an information disclosure… 5.5 Medium Jan 8, 2025
CVE-2023-38729 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to sensitive… 6.8 Medium Apr 3, 2024
CVE-2023-47145 IBM Db2 for Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 could allow a local user to escalate their… 8.4 High Jan 7, 2024
CVE-2019-4014 IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer… 8.4 High Apr 3, 2019
CVE-2018-1936 IBM DB2 9.7, 10.1, 10.5, and 11.1 libdb2e.so.1 is vulnerable to a stack based buffer overflow, caused by improper bounds… 8.4 High Apr 3, 2019

Other IBM products