CVE-2024-28762

IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query under certain conditions. IBM X-Force ID: 285246.

Affected

IBM · Db2 for Linux, UNIX and Windows

CVSS v3.1 NVD

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVSS v3.1 IBM

5.3 MEDIUMCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0.57% chance of exploitation in the next 30 days, 46th percentile

Published

2024-06-12

Updated

2025-11-04

Proof-of-concept exploits (1)

• Professor6T9/WordPressAutoExploiter1★ · 2025-06-25

Security advisories

• https://www.ibm.com/support/pages/node/7156847

References

• CVE Record
• NVD entry

Related

• CVE-2024-27956
• CVE-2025-1128
• CVE-2025-3515