Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2855▼ 166 respecto a la semana anterior

Críticas / altas1379▲ 45 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)266▼ 260 respecto a la semana anterior

6 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-33854	Analizada	Media (5.3)	0.25%	—	IBM DB2 IBM DB2 Warehouse	22/6/2026	26/9/2026	IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data versions 4.8, 5.0, 5.1, 5.2, and 5.3 could allow an authenticated user to bypass client-side validation and manipulate input data using man in the middle techniques.
CVE-2025-2669	Analizada	Media (6.5)	0.34%	—	IBM DB2 IBM DB2 Warehouse	22/6/2026	30/9/2026	IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data versions 4.8, 5.0, 5.1, 5.2, 5.3 could allow a privileged user to perform operations and obtain sensitive information outside of their authority due to improper token validation.
CVE-2024-54178	Analizada	Media (6.5)	0.42%	—	IBM DB2 IBM DB2 Warehouse	22/6/2026	1/10/2026	IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data versions 4.8,5.0,5.1,5.2,5.3 could allow an authenticated user to cause a denial of service when creating new databases due to improper allocation of resources.
CVE-2023-42005	Analizada	Alta (8.8)	0.29%	—	IBM DB2 IBM DB2 Warehouse	29/5/2024	17/6/2026	IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data 3.5, 4.0, 4.5, 4.6, 4.7, and 4.8 could allow a user with access to the Kubernetes pod, to make system calls compromising the security of containers. IBM X-Force ID: 265264.
CVE-2022-41296	Modificada	Alta (8.8)	0.51%	—	IBM DB2 IBM DB2 Warehouse	12/12/2022	17/6/2026	IBM Db2U 3.5, 4.0, and 4.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 237210.
CVE-2022-41297	Modificada	Media (6.5)	0.25%	—	IBM DB2 ON Cloud PAK FOR Data IBM DB2 Warehouse ON Cloud PAK FOR Data IBM Db2u	1/12/2022	17/6/2026	IBM Db2U 3.5, 4.0, and 4.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 237212.