CVE-2025-0915

Medium CVSS: 5.3

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1

under specific configurations could allow an authenticated user to cause a denial of service due to insufficient release of allocated memory resources.

Vendor

Ibm

Product

Db2

CWE

CWE-770

Yayın Tarihi

2025-05-05 21:15:46

Güncelleme

2025-11-03 20:17:06

Source Identifier

psirt@us.ibm.com

KEV Date Added

Kategoriler

CWE-770 Db2 MEDIUM Ibm 2025

Referanslar

https://www.ibm.com/support/pages/node/7232529 https://security.netapp.com/advisory/ntap-20250516-0002/

Benzer Kayıtlar

Medium

CVE-2025-13044

IBM Concert 1.0.0 through 2.2.0 creates temporary files with predictable names, which allows local users to overwrite ar…

Medium

CVE-2026-1243

IBM Content Navigator 3.0.15, 3.1.0, and 3.2.0 is vulnerable to cross-site scripting. This vulnerability allows an authe…

Low

CVE-2025-66487

IBM Aspera Shares 1.9.9 through 1.11.0 does not properly rate limit the frequency that an authenticated user can send em…

Medium

CVE-2025-66486

IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML co…

Medium

CVE-2025-66485

IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to HTTP header injection, caused by improper validation of input by…

Medium

CVE-2025-66484

IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to…