IBM DB2 vulnerabilities
56 published CVEs name IBM DB2 among the affected products.
- 56Published CVEs56 of them scored
- 36Last 12 monthspublished in the last year
- 1Critical16 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-113698
IBM® Db2® is vulnerable to a denial of service when executing a specially crafted query with a Materialized Query Table
IBM · Db2
Medium6.5 - CVE-2026-104364
IBM® Db2® Denial of Service
IBM · Db2
Low3.3 - CVE-2026-104332
IBM® Db2® Denial of Service
IBM · Db2
Medium5.5 - CVE-2026-18166
IBM® Db2® is vulnerable to arbitrary library loading via the CREATE WRAPPER command, allowing a privileged database user to read sensitive files from the host filesystem
IBM · Db2
High7.7 - CVE-2026-105464
IBM® Db2® is vulnerable to a local attacker with DBADM authorization gaining elevated privileges due to improper privilege management
IBM · Db2
High8.8 - CVE-2026-105466
IBM® Db2® is vulnerable to a denial of service when inserting into a table with XML columns under specific conditions
IBM · Db2
Medium6.5 - CVE-2026-105465
IBM® Db2® is vulnerable to privilege escalation when db2ssh is enabled with the db2 instance
IBM · Db2
High8.8 - CVE-2026-78404
IBM® Db2® is vulnerable to local privilege escalation via the db2pd utility
IBM · Db2
Medium6.5 - CVE-2026-15955
IBM® Data Server driver for JDBC and SQLJ could allow a remote attacker to perform an arbitrary file write due to improper validation of file paths
IBM · Db2
High7.5 - CVE-2026-16702
IBM® Db2® federated server could allow a remote authenticated attacker to cause a denial of service due to a null pointer dereference
IBM · Db2
Medium6.5