CVE-2026-11906

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in the data query logic of XMLTable-derived columns.

Score
CVSS 3.1 6.5 Medium
Status
Analyzed - psirt@us.ibm.com
Published
2026-06-30
Last modified
2026-10-25
Weaknesses
CWE-1284

Affected products

References

 
 
© AVABIS GmbH privacypolicy about