Recently modified medium severity vulnerabilities for "ibm db2" 12.1.0

Where

AND

Sort:

IBM Db2 12.1.0 through 12.1.4 federated serverIBM® Db2® is vulnerable to a denial of service when running non fenced federated queries

Risk 36

Severity

6.2

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

IBM Db2 12.1.0 through 12.1.4 federated server is vulnerable to a denial of service when running non fenced federated queries.

1 / 2

Source: MITRE

First published (updated )

CVE-2026-10695

IBM IBM® Db2®IBM® Db2® is vulnerable to a trap when compiling specially crafted statements containing subqueries could lead to a denial of service

Risk 31

Severity

5.5

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a trap when compiling a specially crafted statements containing subqueries could lead to a denial of service.

1 / 2

Source: MITRE

First published (updated )

CVE-2026-7771

IBM DB2IBM® Db2® could disclose sensitive information to an authenticated user from the monitoring and event tables

Risk 38

Severity

6.5

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could disclose sensitive information to an authenticated user from the monitoring and event tables.

1 / 2

Source: MITRE

First published (updated )

CVE-2025-36372

IBM DB2IBM® Db2® federated server is vulnerable to a denial of service due to improper neutralization of special elements in the data query logic of XMLTable-derived columns by autheticated user

Risk 38

Severity

6.5

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in the data query logic of XMLTable-derived columns.

1 / 2

Source: MITRE

First published (updated )

CVE-2026-11906

IBM DB2IBM® Db2® is vulnerable to a denial of service when a specially crafted query is run with range partitioned tables

Risk 32

Severity

5.5

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a denial of service when a specially crafted query is run with range partitioned tables.

First published (updated )

CVE-2026-6053

IBM Db2 LinuxIBM Db2 denial of service

Risk 32

Severity

5.3

Race Condition

AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 12.1.0 through 12.1.1

could allow an authenticated user to cause a denial of service due to concurrent execution of shared resources.

1 / 2

Source: MITRE

Remedy

Customers running any vulnerable fixpack level of an affected Program, V12.1, can download the special build containing the interim fix for this issue from Fix Central. These special builds are available based on the most recent fixpack level for each impacted release: V12.1. They can be applied to any affected fixpack level of the appropriate release to remediate this vulnerability.

First published (updated )

CVE-2025-1493

IBM Db2 LinuxIBM Db2 denial of service

Risk 38

Severity

6.5

AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 could allow an authenticated user to cause a denial of service when using Q replication due to the improper allocation of CPU resources.

1 / 2

Source: MITRE

Remedy

Customers running any vulnerable affected level of an affected Program, V11.5, and V12.1, can download the special build containing the interim fix for this issue from Fix Central. These special builds are available based on the most recent affected level for each impacted release: V11.5.9, and V12.1.1. They can be applied to any affected mod pack level of the appropriate release to remediate this vulnerability.

First published (updated )

CVE-2025-3050

Trending

IBM Db2 12.1.0 through 12.1.4 federated serverIBM® Db2® is vulnerable to a denial of service when running non fenced federated queries

IBM IBM® Db2®IBM® Db2® is vulnerable to a trap when compiling specially crafted statements containing subqueries could lead to a denial of service

IBM DB2IBM® Db2® could disclose sensitive information to an authenticated user from the monitoring and event tables

IBM DB2IBM® Db2® federated server is vulnerable to a denial of service due to improper neutralization of special elements in the data query logic of XMLTable-derived columns by autheticated user

IBM DB2IBM® Db2® is vulnerable to a denial of service when a specially crafted query is run with range partitioned tables

IBM Db2 LinuxIBM Db2 denial of service

Remedy

IBM Db2 LinuxIBM Db2 denial of service

Remedy

Company

Resources

Contact