CVE-2021-29825: High severity IBM DB2 vulnerability
Published Sep 16, 2021
·Updated
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) could disclose sensitive information when using ADMINCMD with LOAD or BACKUP.
Affected Software
9 affected components
IBM DB2=11.1
IBM DB2=11.5
IBM AIX
Linux Linux kernel
Microsoft Windows
Opengroup Unix
Oracle Solaris
IBM IBM® Db2®<=11.1.4 - 11.1.4.6
IBM IBM® Db2®<=11.5.0 - 11.5.6
Event History
Sep 16, 2021
CVE Published
via MITRE·03:50 PM
Data Sourced
via MITRE·03:50 PM
DescriptionSeverityWeakness
Feb 24, 2026
Data Sourced
via IBM·06:35 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2021-29825.
2
What is the severity of CVE-2021-29825?
The severity of CVE-2021-29825 is high with a CVSS score of 7.5.
3
What software is affected by CVE-2021-29825?
IBM Db2 for Linux, UNIX, and Windows (including Db2 Connect Server) versions 11.1 and 11.5 are affected.
4
How can CVE-2021-29825 be exploited?
CVE-2021-29825 can be exploited by using ADMIN_CMD with LOAD or BACKUP in IBM Db2 for Linux, UNIX, and Windows.
5
Are there any references available for CVE-2021-29825?
Yes, you can find references for CVE-2021-29825 at the following links: [reference 1](https://exchange.xforce.ibmcloud.com/vulnerabilities/204470), [reference 2](https://security.netapp.com/advisory/ntap-20211029-0005/), [reference 3](https://www.ibm.com/support/pages/node/6489499).