CVE-2025-13755

5.5 mediumEPSS 0.1%

Medium (5.5) in ibm db2. EPSS 0.1% chance of exploitation in the next 30 days.

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes DB2 Connect Server) stores potentially sensitive information in log files that could be read by a local user.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 1% of CVEs (scores of 2026-10-31)
CWE: CWE-532
Published: 2026-05-26
Modified: 2026-07-24
Record from: the NVD, synced 2026-10-19

Affected

ibm:db2

References

https://www.ibm.com/support/pages/node/7273554

Check your stack JSON