CVE-2024-54178 | IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak… | CVSS 6.5 MEDIUM

Description

IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data versions 4.8,5.0,5.1,5.2,5.3 could allow an authenticated user to cause a denial of service when creating new databases due to improper allocation of resources.

Metadata

CVE ID: CVE-2024-54178
State: PUBLISHED
Assigner: ibm
Reserved: 2024-11-30 14:47 UTC
Published: 2026-06-22 13:15 UTC
Last updated: 2026-06-22 16:07 UTC
Primary CWE: CWE-770
CWE-770 Allocation of Resources Without Limits or Throttling
Vendor / Product: IBM / Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data
Sources: cve.org · NVD

Severity & Metrics

6.5 MEDIUM CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

SSVC — CISA Coordinator

Exploitation: none
Automatable: no
Tech. Impact: partial

Affected products (1)

Vendor	Product	Platform	Versions
IBM	Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data	—	4.8.0, 5.0.0 ≤ 5.3.0

Weakness (CWE)

CWE	Source	Description
CWE-770	cna	CWE-770 Allocation of Resources Without Limits or Throttling

CVSS scores (1)

Score	Severity	Version	Source	Vector
6.5	MEDIUM	3.1	cna	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References (1)

https://www.ibm.com/support/pages/node/7277112