Recently modified vulnerabilities for "ibm ibm® db2®" 12.1.0 - 12.1.4

Where

AND

Sort:

IBM IBM® Db2®1 vulnerability

First published (updated )

Advisory

IBM-7279479

IBM® Data Server driver for JDBC and SQLJ is vulnerable to remote code execution when jdbc url is under user control

Risk 51

Severity

7.8

EPSS

0.17%

Code Injection

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

IBM Data Server Driver for JDBC and SQLJ is vulnerable to remote code execution when jdbc url is under user control.

1 / 2

Source: IBM

First published (updated )

CVE-2026-9762

IBM IBM® Db2®1 vulnerability

First published (updated )

Advisory

IBM-7279480

IBM® Db2® is vulnerable to a trap when compiling specially crafted statements containing subqueries could lead to a denial of service

Risk 31

Severity

5.5

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a trap when compiling a specially crafted statements containing subqueries could lead to a denial of service.

1 / 2

Source: MITRE

First published (updated )

CVE-2026-7771

IBM IBM® Db2®1 vulnerability

First published (updated )

Advisory

IBM-7279466

IBM® Db2® is vulnerable to buffer overflow in setgid helper db2flacc which can lead to privilege escalation and instance compromise from an unprivileged shell

Risk 74

Severity

8.4

Buffer Overflow

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to buffer overflow in setgid helper db2flacc.

1 / 2

Source: MITRE

First published (updated )

CVE-2026-10535

IBM IBM® Db2®1 vulnerability

First published (updated )

Advisory

IBM-7279474

IBM® Db2® is vulnerable to a denial of service when running non fenced federated queries

Risk 36

Severity

6.2

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

IBM Db2 12.1.0 through 12.1.4 federated server is vulnerable to a denial of service when running non fenced federated queries.

1 / 2

Source: MITRE

First published (updated )

CVE-2026-10695

IBM IBM® Db2®1 vulnerability

First published (updated )

Advisory

IBM-7277417

IBM® Db2® could disclose sensitive information to an authenticated user from the monitoring and event tables

Risk 38

Severity

6.5

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could disclose sensitive information to an authenticated user from the monitoring and event tables.

1 / 2

Source: MITRE

First published (updated )

CVE-2025-36372

IBM IBM® Db2®1 vulnerability

First published (updated )

Advisory

IBM-7277424

IBM® Db2® is vulnerable to remote code execution due to improper pre-auth DRDA handshake handling

Risk 86

Severity

9.8

Code Injection

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution due to improper pre-auth DRDA handshake handling.

1 / 2

Source: MITRE

First published (updated )

CVE-2026-10109

IBM IBM® Db2®1 vulnerability

First published (updated )

Advisory

IBM-7277423

IBM® Db2® federated server is vulnerable to a denial of service due to improper neutralization of special elements in the data query logic of XMLTable-derived columns by autheticated user

Risk 38

Severity

6.5

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in the data query logic of XMLTable-derived columns.

1 / 2

Source: MITRE

First published (updated )

CVE-2026-11906