IBM DB2 High Performance Unload Load vulnerabilities

8 CVEs affecting IBM DB2 High Performance Unload Load, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-33133, published 2025-10-28.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-4447, published 2019-08-26. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. IBM DB2 High Performance Unload load for LUW 6.1, 6.1.0.1, 6.1.0.1 IF1, 6.1.0.2, 6.1.0.2 IF1, and 6.1.0.1 IF2 db2hpum_debug is a setuid root binary which trusts the PATH environment variable. A low…
CVE-2019-4523, published 2019-10-22. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. IBM DB2 High Performance Unload load for LUW 6.1 and 6.5 is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the…
CVE-2019-4606, published 2019-12-12. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. IBM DB2 High Performance Unload load for LUW 6.1 and 6.5 could allow a local attacker to execute arbitrary code on the system, caused by an untrusted search path vulnerability. By using a executable…
CVE-2019-4448, published 2019-08-26. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. IBM DB2 High Performance Unload load for LUW 6.1, 6.1.0.1, 6.1.0.1 IF1, 6.1.0.2, 6.1.0.2 IF1, and 6.1.0.1 IF2 db2hpum and db2hpum_debug binaries are setuid root and have built-in options that allow…
CVE-2025-33133, published 2025-10-28. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. IBM DB2 High Performance Unload 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, and 5.1 could allow an authenticated user to cause the program to crash due an out of bounds write.
CVE-2025-33132, published 2025-10-28. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. IBM DB2 High Performance Unload 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, and 5.1 could allow an authenticated user to cause the program to crash due to the incorrect calculation of…
CVE-2025-33131, published 2025-10-28. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. IBM DB2 High Performance Unload 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, and 5.1 could allow an authenticated user to cause the program to crash due to a buffer being overwritten…
CVE-2025-33126, published 2025-10-28. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. IBM DB2 High Performance Unload 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, 5.1, 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, 5.1, 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0…