# IBM Db2. Every CVE that names IBM Db2 among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [IBM® Db2® Denial of Service](https://agentprime.io/advisories/CVE-2026-104364.md) `CVE-2026-104364` · CVE record: IBM Db2 · CVSS 3.3 Low · Not analysed yet · Published 12 Oct 2026 · Tags: CWE-20 - [IBM® Db2® Denial of Service](https://agentprime.io/advisories/CVE-2026-104332.md) `CVE-2026-104332` · CVE record: IBM Db2 · CVSS 5.5 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Memory corruption - [IBM® Db2® is vulnerable to arbitrary library loading via the CREATE WRAPPER command, allowing a privileged database user to read sensitive files from the host filesystem](https://agentprime.io/advisories/CVE-2026-18166.md) `CVE-2026-18166` · CVE record: IBM Db2 · CVSS 7.7 High · Not analysed yet · Published 12 Oct 2026 · Tags: Broken access control - [IBM® Db2® is vulnerable to a local attacker with DBADM authorization gaining elevated privileges due to improper privilege management](https://agentprime.io/advisories/CVE-2026-105464.md) `CVE-2026-105464` · CVE record: IBM Db2 · CVSS 8.8 High · Not analysed yet · Published 12 Oct 2026 · Tags: Privilege escalation - [IBM® Db2® is vulnerable to a denial of service when inserting into a table with XML columns under specific conditions](https://agentprime.io/advisories/CVE-2026-105466.md) `CVE-2026-105466` · CVE record: IBM Db2 · CVSS 6.5 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Denial of service - [IBM® Db2® is vulnerable to privilege escalation when db2ssh is enabled with the db2 instance](https://agentprime.io/advisories/CVE-2026-105465.md) `CVE-2026-105465` · CVE record: IBM Db2 · CVSS 8.8 High · Not analysed yet · Published 12 Oct 2026 · Tags: Privilege escalation - [IBM® Db2® is vulnerable to local privilege escalation via the db2pd utility](https://agentprime.io/advisories/CVE-2026-78404.md) `CVE-2026-78404` · CVE record: IBM Db2 · CVSS 6.5 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Privilege escalation - [IBM® Data Server driver for JDBC and SQLJ could allow a remote attacker to perform an arbitrary file write due to improper validation of file paths](https://agentprime.io/advisories/CVE-2026-15955.md) `CVE-2026-15955` · CVE record: IBM Db2 · CVSS 7.5 High · Not analysed yet · Published 14 Sept 2026 · Tags: Path traversal - [IBM® Db2® federated server could allow a remote authenticated attacker to cause a denial of service due to a null pointer dereference](https://agentprime.io/advisories/CVE-2026-16702.md) `CVE-2026-16702` · CVE record: IBM Db2 · CVSS 6.5 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Memory corruption - [IBM® Db2® could allow a remote authenticated attacker to cause a denial of service due to uncontrolled resource consumption](https://agentprime.io/advisories/CVE-2026-17463.md) `CVE-2026-17463` · CVE record: IBM Db2 · CVSS 6.5 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Denial of service - [IBM® Db2® could allow an authenticated user to send a specially crafted request to write arbitrary files on the system](https://agentprime.io/advisories/CVE-2026-86087.md) `CVE-2026-86087` · CVE record: IBM Db2 · CVSS 4.3 Medium · Not analysed yet · Published 10 Sept 2026 · Tags: Path traversal - [IBM® Db2® federated server could allow an attacker with the ability to control or impersonate a DRDA server endpoint to execute arbitrary commands under certain conditions](https://agentprime.io/advisories/CVE-2026-86093.md) `CVE-2026-86093` · CVE record: IBM Db2 · CVSS 7.5 High · Not analysed yet · Published 10 Sept 2026 · Tags: Memory corruption - [IBM® Db2® is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by a privileged user under certain conditions](https://agentprime.io/advisories/CVE-2026-87958.md) `CVE-2026-87958` · CVE record: IBM Db2 · CVSS 8.1 High · Not analysed yet · Published 10 Sept 2026 · Tags: Privilege escalation - [IBM® Db2® is vulnerable to buffer overflow in the IXF IMPORT parser](https://agentprime.io/advisories/CVE-2026-10534.md) `CVE-2026-10534` · CVE record: IBM Db2 · CVSS 8.4 High · Not analysed yet · Published 12 Aug 2026 · Tags: Memory corruption - [IBM® Db2® is vulnerable to privilege escalation with a specially crafted query](https://agentprime.io/advisories/CVE-2026-10543.md) `CVE-2026-10543` · CVE record: IBM Db2 · CVSS 8.2 High · Not analysed yet · Published 12 Aug 2026 · Tags: Broken access control - [IBM® Db2® is affected by an improper authorization vulnerability in the certain command, allowing a non-privileged user to bypass authority checks and modify database catalog data.](https://agentprime.io/advisories/CVE-2026-16480.md) `CVE-2026-16480` · CVE record: IBM Db2 · CVSS 4.3 Medium · Not analysed yet · Published 12 Aug 2026 · Tags: CWE-602 - [IBM® Db2® federated server could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files.](https://agentprime.io/advisories/CVE-2026-18097.md) `CVE-2026-18097` · CVE record: IBM Db2 · CVSS 5.5 Medium · Not analysed yet · Published 12 Aug 2026 · Tags: Information disclosure - [IBM® Db2® could allow a local attacker to cause a denial of service due to a memory leak](https://agentprime.io/advisories/CVE-2026-18096.md) `CVE-2026-18096` · CVE record: IBM Db2 · CVSS 3.3 Low · Not analysed yet · Published 12 Aug 2026 · Tags: Denial of service - [IBM® Db2® is vulnerable to buffer overflow in setgid helper db2flacc which can lead to privilege escalation and instance compromise from an unprivileged shell](https://agentprime.io/advisories/CVE-2026-10535.md) `CVE-2026-10535` · CVE record: IBM Db2 · CVSS 8.4 High · Not analysed yet · Published 30 Jul 2026 · Tags: Memory corruption - [IBM® Db2® is vulnerable to a denial of service when running non fenced federated queries](https://agentprime.io/advisories/CVE-2026-10695.md) `CVE-2026-10695` · CVE record: IBM Db2 · CVSS 6.2 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: Denial of service - [IBM® Db2® is vulnerable to a trap when compiling specially crafted statements containing subqueries could lead to a denial of service](https://agentprime.io/advisories/CVE-2026-7771.md) `CVE-2026-7771` · CVE record: IBM Db2 · CVSS 5.5 Medium · Not analysed yet · Published 17 Jul 2026 · Tags: Denial of service - [IBM® Data Server driver for JDBC and SQLJ is vulnerable to remote code execution when jdbc url is under user control](https://agentprime.io/advisories/CVE-2026-9762.md) `CVE-2026-9762` · CVE record: IBM Db2 · CVSS 7.8 High · Not analysed yet · Published 17 Jul 2026 · Tags: Code injection - [IBM® Db2® could disclose sensitive information to an authenticated user from the monitoring and event tables](https://agentprime.io/advisories/CVE-2025-36372.md) `CVE-2025-36372` · CVE record: IBM Db2 · CVSS 5.5 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: Information disclosure - [IBM® Db2® is vulnerable to remote code execution due to improper pre-auth DRDA handshake handling](https://agentprime.io/advisories/CVE-2026-10109.md) `CVE-2026-10109` · CVE record: IBM Db2 · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jun 2026 · Tags: Code injection - [IBM® Db2® federated server is vulnerable to a denial of service due to improper neutralization of special elements in the data query logic of XMLTable-derived columns by autheticated user](https://agentprime.io/advisories/CVE-2026-11906.md) `CVE-2026-11906` · CVE record: IBM Db2 · CVSS 6.5 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: CWE-1284 - [IBM® Db2® is vulnerable to authorization bypass when uploading to a remote object storage path with a special query](https://agentprime.io/advisories/CVE-2026-6938.md) `CVE-2026-6938` · CVE record: IBM Db2 · CVSS 6.5 Medium · Not analysed yet · Published 27 May 2026 · Tags: Broken access control - [IBM® Db2® is vulnerable to a denial of service when a specially crafted query is run with range partitioned tables](https://agentprime.io/advisories/CVE-2026-6053.md) `CVE-2026-6053` · CVE record: IBM Db2 · CVSS 5.5 Medium · Not analysed yet · Published 27 May 2026 · Tags: Denial of service - [IBM® Db2® is vulnerable to running out of memory when executing certain queries with MDC tables](https://agentprime.io/advisories/CVE-2026-6052.md) `CVE-2026-6052` · CVE record: IBM Db2 · CVSS 6.5 Medium · Not analysed yet · Published 27 May 2026 · Tags: Denial of service - [IBM® Db2® is vulnerable to a denial of service when executing a specially crafted query with a small statement heap](https://agentprime.io/advisories/CVE-2026-6051.md) `CVE-2026-6051` · CVE record: IBM Db2 · CVSS 5.5 Medium · Not analysed yet · Published 27 May 2026 · Tags: Denial of service - [IBM® Db2® is vulnerable to a denial of service with a specially crafted query when running an AUTONOMOUS procedure](https://agentprime.io/advisories/CVE-2026-1718.md) `CVE-2026-1718` · CVE record: IBM Db2 · CVSS 7.1 High · Not analysed yet · Published 27 May 2026 · Tags: Denial of service - [IBM® Db2® is vulnerable to credential exposure in db2diag when executing specific testcase buckets](https://agentprime.io/advisories/CVE-2025-13755.md) `CVE-2025-13755` · CVE record: IBM Db2 · CVSS 5.5 Medium · Not analysed yet · Published 26 May 2026 · Tags: Information disclosure - [IBM® Db2® is vulnerable to a denial of service with a specially crafted query involving multiple subqueries](https://agentprime.io/advisories/CVE-2026-1577.md) `CVE-2026-1577` · CVE record: IBM Db2 · CVSS 6.5 Medium · Not analysed yet · Published 30 Apr 2026 · Tags: CWE-20 - [IBM® Db2® is vulnerable to a denial of service with a specially crafted query when stmtheap is set to automatic](https://agentprime.io/advisories/CVE-2025-36122.md) `CVE-2025-36122` · CVE record: IBM Db2 · CVSS 6.5 Medium · Not analysed yet · Published 30 Apr 2026 · Tags: Denial of service - [IBM® Db2® is vulnerable to a denial of service when fetching from certain tables under specific configurations](https://agentprime.io/advisories/CVE-2025-14688.md) `CVE-2025-14688` · CVE record: IBM Db2 · CVSS 5.3 Medium · Not analysed yet · Published 30 Apr 2026 · Tags: CWE-1284 - [IBM® Db2® is vulnerable to a trap or return SQLCODE -901 when compiling a specially crafted query with a defined index](https://agentprime.io/advisories/CVE-2026-1352.md) `CVE-2026-1352` · CVE record: IBM Db2 · CVSS 6.5 Medium · Not analysed yet · Published 22 Apr 2026 · Tags: CWE-1284 - [IBM Db2 denial of service](https://agentprime.io/advisories/CVE-2025-36006.md) `CVE-2025-36006` · CVE record: IBM Db2 · CVSS 6.5 Medium · Not analysed yet · Published 7 Nov 2025 · Tags: Denial of service - [IBM Db2 denial of service](https://agentprime.io/advisories/CVE-2025-36008.md) `CVE-2025-36008` · CVE record: IBM Db2 · CVSS 6.5 Medium · Not analysed yet · Published 7 Nov 2025 · Tags: Denial of service - [IBM Db2 information disclosure](https://agentprime.io/advisories/CVE-2025-36131.md) `CVE-2025-36131` · CVE record: IBM Db2 · CVSS 4.6 Medium · Not analysed yet · Published 7 Nov 2025 · Tags: Information disclosure - [IBM denial of service](https://agentprime.io/advisories/CVE-2025-36136.md) `CVE-2025-36136` · CVE record: IBM Db2 · CVSS 5.1 Medium · Not analysed yet · Published 7 Nov 2025 · Tags: Denial of service - [IBM Db2 denial of service](https://agentprime.io/advisories/CVE-2025-36185.md) `CVE-2025-36185` · CVE record: IBM Db2 · CVSS 6.2 Medium · Not analysed yet · Published 7 Nov 2025 · Tags: Other injection - [IBM Db2 privilege escalation](https://agentprime.io/advisories/CVE-2025-36186.md) `CVE-2025-36186` · CVE record: IBM Db2 · CVSS 7.4 High · Not analysed yet · Published 7 Nov 2025 · Tags: Privilege escalation - [IBM Db2 improper account lockout](https://agentprime.io/advisories/CVE-2025-33012.md) `CVE-2025-33012` · CVE record: IBM Db2 · CVSS 6.3 Medium · Not analysed yet · Published 7 Nov 2025 · Tags: CWE-324 - [IBM Db2 denial of service](https://agentprime.io/advisories/CVE-2025-2534.md) `CVE-2025-2534` · CVE record: IBM Db2 · CVSS 5.3 Medium · Not analysed yet · Published 7 Nov 2025 · Tags: Denial of service - [IBM Db2 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query](https://agentprime.io/advisories/CVE-2024-47118.md) `CVE-2024-47118` · CVE record: IBM Db2 · CVSS 6.5 Medium · Not analysed yet · Published 7 Nov 2025 · Tags: Memory corruption - [IBM Db2 for Linux, UNIX and Windows denial of service](https://agentprime.io/advisories/CVE-2024-49828.md) `CVE-2024-49828` · CVE record: IBM Db2 · CVSS 6.5 Medium · Not analysed yet · Published 29 Jul 2025 · Tags: Memory corruption - [IBM Db2 for Linux, UNIX and Windows denial of service](https://agentprime.io/advisories/CVE-2024-51473.md) `CVE-2024-51473` · CVE record: IBM Db2 · CVSS 6.5 Medium · Not analysed yet · Published 29 Jul 2025 · Tags: Memory corruption - [IBM Db2 for Linux, UNIX and Windows denial of service](https://agentprime.io/advisories/CVE-2024-52894.md) `CVE-2024-52894` · CVE record: IBM Db2 · CVSS 4.9 Medium · Not analysed yet · Published 29 Jul 2025 · Tags: Memory corruption - [IBM Db2 for Linux denial of service](https://agentprime.io/advisories/CVE-2025-33114.md) `CVE-2025-33114` · CVE record: IBM Db2 · CVSS 5.3 Medium · Not analysed yet · Published 29 Jul 2025 · Tags: Other injection - [IBM Db2 for Linux code execution](https://agentprime.io/advisories/CVE-2025-33092.md) `CVE-2025-33092` · CVE record: IBM Db2 · CVSS 7.8 High · Not analysed yet · Published 29 Jul 2025 · Tags: Memory corruption - [IBM Db2 denial of service](https://agentprime.io/advisories/CVE-2025-36071.md) `CVE-2025-36071` · CVE record: IBM IBM Db2 · CVSS 6.5 Medium · Not analysed yet · Published 29 Jul 2025 · Tags: Denial of service - [IBM Db2 for Linux denial of service](https://agentprime.io/advisories/CVE-2025-36010.md) `CVE-2025-36010` · CVE record: IBM Db2 · CVSS 6.5 Medium · Not analysed yet · Published 29 Jul 2025 · Tags: Denial of service - [IBM Db2 for Linux denial of service](https://agentprime.io/advisories/CVE-2025-2533.md) `CVE-2025-2533` · CVE record: IBM Db2 · CVSS 5.3 Medium · Not analysed yet · Published 29 Jul 2025 · Tags: Denial of service - [IBM Db2 information disclosure](https://agentprime.io/advisories/CVE-2024-40679.md) `CVE-2024-40679` · CVE record: IBM Db2 · CVSS 5.5 Medium · Not analysed yet · Published 8 Jan 2025 · Tags: Information disclosure - [IBM Db2 for Windows privilege escalation](https://agentprime.io/advisories/CVE-2023-47145.md) `CVE-2023-47145` · CVE record: IBM Db2 · CVSS 8.4 High · Not analysed yet · Published 7 Jan 2024 · Tags: Privilege escalation - [IBM DB2: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5…](https://agentprime.io/advisories/CVE-2019-4014.md) `CVE-2019-4014` · CVE record: IBM DB2 and 1 more · CVSS 8.4 High · Not analysed yet · Published 3 Apr 2019 - [IBM DB2: IBM DB2 9.7, 10.1, 10.5, and 11.1 libdb2e.so.1 is vulnerable to a stack based buffer…](https://agentprime.io/advisories/CVE-2018-1936.md) `CVE-2018-1936` · CVE record: IBM DB2 and 1 more · CVSS 8.4 High · Not analysed yet · Published 3 Apr 2019 ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .