High severity7.5NVD Advisory· Published Dec 9, 2021· Updated Jun 17, 2026

CVE-2021-39002

Description

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

IBM/Db25 versions
cpe:2.3:a:ibm:db2:10.1:*:*:*:*:-:*:*+ 4 more
- cpe:2.3:a:ibm:db2:10.1:*:*:*:*:-:*:*
- cpe:2.3:a:ibm:db2:10.5:-:*:*:*:*:*:*
- cpe:2.3:a:ibm:db2:11.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:db2:11.5:*:*:*:*:-:*:*
- cpe:2.3:a:ibm:db2:9.7:*:*:*:*:*:*:*
NetApp/Oncommand Insight
cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*
IBM/Db2 for Linux, UNIX and Windowsllm-fuzzy
IBM/Db2 Recovery Expert for Linux, UNIX and Windowscpe-rescue
Range: 10.5

Patches

Vulnerability mechanics

References

exchange.xforce.ibmcloud.com/vulnerabilities/213217nvdVDB EntryVendor Advisory
security.netapp.com/advisory/ntap-20220114-0002/nvdThird Party Advisory
www.ibm.com/support/pages/node/6523802nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000