Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-14688 EUVD-2025-209600GHSA-wjh9-35xc-wcv8

IBM® Db2® is vulnerable to a denial of service when fetching from certain tables under specific configurations

Published Apr 30, 2026 · Updated May 27, 2026 · Assigned by ibm

Description

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in data query logic when certain configurations exist.

Affected products

VendorProductAffectedFixed
IBM Db2 11.5.0 – ≤ 11.5.9, 12.1.0 – ≤ 12.1.3 —

Advisories 1

References