Threats affecting pkg:maven/com.ibm/db2

4 threats

Severity	CVSS	Signals	Threat	Source	Published
High	8.4	EPSS 0.4%	CVE-2026-10534IBM Db2 · Stack-based Buffer Overflow High8.4EPSS 0.4%2026-08-12CVE Database V5CVE-2026-10534 IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT parser. EPSS 0.4%Vulnerability CWE-121 #ghsa-g6q7-fjqm-mw94	CVE Database V5	2026-08-12
High	8.2	EPSS 0.4%	CVE-2026-10543IBM Db2 · Improper Authorization High8.2EPSS 0.4%2026-08-12CVE Database V5CVE-2026-10543 IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to privilege escalation with a specially crafted query. EPSS 0.4%Vulnerability CWE-285	CVE Database V5	2026-08-12
High	8.4	EPSS 0.2%	CVE-2026-10535IBM Db2 · Stack-based Buffer Overflow High8.4EPSS 0.2%2026-07-30CVE Database V5CVE-2026-10535 IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to buffer overflow in setgid helper db2flacc. EPSS 0.2%Vulnerability CWE-121	CVE Database V5	2026-07-30
Medium	6.5	EPSS 0.4%	CVE-2026-11906IBM Db2 · Improper Validation of Specified Quantity in Input Medium6.5EPSS 0.4%2026-06-30CVE Database V5CVE-2026-11906 IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in the data query logic of XMLTable-derived columns. EPSS 0.4%Vulnerability CWE-1284	CVE Database V5	2026-06-30

Page 1 of 1