CVE-2024-35136

6.5 mediumEPSS 0.6%

Medium (6.5) in ibm db2. EPSS 0.6% chance of exploitation in the next 30 days.

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) federated server 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query under certain non default conditions. IBM X-Force ID: 291307.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
CWE: CWE-943
Published: 2024-08-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:db2

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/291307
https://www.ibm.com/support/pages/node/7165341
https://security.netapp.com/advisory/ntap-20240912-0003/

Check your stack JSON