Skip to content
OpenAdvisories
Medium WID-SEC-2026-1646 6 CVEs

IBM DB2: Mehrere Schwachstellen

Published May 21, 2026 · Updated Jun 9, 2026 · Revision 5 · de-DE

Vendor: IBM Product: Db2 Product: License Metric Tool Product: Tivoli Key Lifecycle Manager Platform: Windows

Summary

Ein entfernter, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen oder einen Denial-of-Service-Zustand zu verursachen.

Product

IBM DB2 ist ein relationales Datenbanksystem (RDBS) von IBM.

Vulnerabilities 6

  • High 7.1
    CVE-2026-1718

    IBM® Db2® is vulnerable to a denial of service with a specially crafted query when running an AUTONOMOUS procedure

    IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a denial of service with a specially crafted query when autonomous transactions are enabled.

    IBM Db2
  • Medium 6.5
    CVE-2026-6052

    IBM® Db2® is vulnerable to running out of memory when executing certain queries with MDC tables

    IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to running out of memory when executing certain queries with MDC tables.

    IBM Db2
  • Medium 6.5
    CVE-2026-6938

    IBM® Db2® is vulnerable to authorization bypass when uploading to a remote object storage path with a special query

    IBM Db2 12.1.0 through 12.1.4 is vulnerable to authorization bypass when uploading to a remote object storage path with a special query.

    IBM Db2
  • Medium 5.5
    CVE-2025-13755

    IBM® Db2® is vulnerable to credential exposure in db2diag when executing specific testcase buckets

    IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes DB2 Connect Server) stores potentially sensitive information in log files that could be read by a local user.

    IBM Db2
  • Medium 5.5
    CVE-2026-6051

    IBM® Db2® is vulnerable to a denial of service when executing a specially crafted query with a small statement heap

    IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a denial of service when executing a specially crafted query with a small statement heap.

    IBM Db2
  • Medium 5.5
    CVE-2026-6053

    IBM® Db2® is vulnerable to a denial of service when a specially crafted query is run with range partitioned tables

    IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to a denial of service when a specially crafted query is run with range partitioned tables.

    IBM Db2

Revision history

  1. #5

    Neue Updates von IBM aufgenommen

  2. #4

    Neue Updates von IBM aufgenommen

  3. #3

    Referenz(en) aufgenommen: EUVD-2026-32492, EUVD-2026-32490, EUVD-2026-32488, EUVD-2026-32489, EUVD-2026-32266

  4. #2

    Referenz(en) aufgenommen: EUVD-2025-209933

  5. #1

    Initiale Fassung

References