CVE-2024-40679

5.5 mediumEPSS 0.2%

Medium (5.5) in ibm db2. EPSS 0.2% chance of exploitation in the next 30 days.

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to an information disclosure vulnerability as sensitive information may be included in a log file under specific conditions.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 5% of CVEs (scores of 2026-10-31)
CWE: CWE-532
Published: 2025-01-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:db2

References

https://www.ibm.com/support/pages/node/7175957

Check your stack JSON