CVE-2020-5024: IBM DB2

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauthenticated attacker to cause a denial of service due a hang in the SSL handshake response. IBM X-Force ID: 193660.

Affected products

• IBM DB2: from 11.1.0.0, before 11.1.4.6 (fixed in 11.1.4.6); from 11.5, before 11.5.5.0 (fixed in 11.5.5.0); version 9.7 only; version 10.1 only; version 10.5 only
• Netapp Oncommand Insight: affected versions not specified

Published 2021-03-11. Last modified 2026-06-17.