CVE-2023-47746: IBM DB2

Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days.

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 could allow an authenticated user with CONNECT privileges to cause a denial of service using a specially crafted query. IBM X-Force ID: 272644.

Affected products

• IBM DB2: from 10.5.0.0, up to and including 10.5.0.11; from 11.1.0.0, up to and including 11.1.4.7; from 11.5, up to and including 11.5.9

Published 2024-01-22. Last modified 2026-06-17.