CVE-2025-14689

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 12.1.0 through 12.1.3 could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in data query logic with federated objects...

EUVD-2025-38305

IBM Db2 12.1.0 through 12.1.3 for Linux, UNIX and Windows includes Db2 Connect Server under specific configurations could allow a local user to execute malicious code that escalate their privileges to root due to execution of unnecessary privileges operated at a higher than minimum level...

CVE-2025-36008

CVE-2025-36008 affects IBM Db2 on Linux/UNIX/Windows (including Db2 Connect Server) and is a denial-of-service vulnerability caused by improper resource allocation. An authenticated user could exhaust resources to disrupt availability. IBM’s advisories for Db2 Pacemaker and GKLM context indicate ...