VULNERABILITY INTELLIGENCE

CVE-2025-36372

CVSS score5.5 MEDIUM
EPSS probability0.30%
CISA KEVNot currently listed
Published2026-06-30
Last modified2026-09-29
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could disclose sensitive information to an authenticated user from the monitoring and event tables.

Weakness classification

  • psirt@us.ibm.com: CWE-538
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references