DeutschShown in its original language — a full translation is planned for a future version.
IBM DB2: Mehrere Schwachstellen
view advisory published 2026-02-09
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um einen Denial of Service Angriff durchzuführen und vertrauliche Informationen offenzulegen.
01
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-33130US | — | — | ||
IBM DB2 Merge Backup for Linux, UNIX and Windows 12.1.0.0 could allow an authenticated user to cause the program to crash due to a buffer being overwritten when it is allocated on… | ||||
| CVE-2025-33124US | — | — | ||
IBM DB2 Merge Backup for Linux, UNIX and Windows 12.1.0.0 could allow an authenticated user to cause the program to crash due to the incorrect calculation of a buffer size. | ||||
| CVE-2025-13108US | high7.5 | — | ||
IBM DB2 Merge Backup for Linux, UNIX and Windows 12.1.0.0 could allow an attacker to access sensitive information in memory due to the buffer not properly clearing resources. | ||||
| CVE-2025-36425US | medium6.5 | — | ||
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.3 could allow an authenticated user to obtain sensitive information… | ||||
| CVE-2025-36247US | high8.2 | — | ||
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.3 is vulnerable to an XML external entity injection (XXE) attack whe… | ||||
| CVE-2025-14689US | — | — | ||
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 12.1.0 through 12.1.3 could allow an authenticated user to cause a denial of service due to improper neutralizatio… | ||||
| CVE-2025-13867US | medium6.5 | — | ||
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.3 could allow an authenticated user to cause a denial of service due… | ||||
02
references
External citations — patches, advisories, analysis.
- WID-SEC-W-2026-0352 - CSAF Versionself
- WID-SEC-2026-0352 - Portal Versionself
- IBM Security Bulletin 7259961 vom 2026-02-09external
- IBM Security Bulletin 7259962 vom 2026-02-09external
- IBM Security Bulletin 7259963 vom 2026-02-09external
- IBM Security Bulletin 7259964 vom 2026-02-09external
- IBM Security Bulletin 7260043 vom 2026-02-09external
- IBM Security Bulletin 7270885 vom 2026-04-27external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan