CVE-2025-13867

6.5 mediumEPSS 0.3%

Medium (6.5) in ibm db2. EPSS 0.3% chance of exploitation in the next 30 days.

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.3 could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in data query logic

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 19% of CVEs (scores of 2026-10-31)
CWE: CWE-1284
Published: 2026-02-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:db2

References

https://www.ibm.com/support/pages/node/7259963

Check your stack JSON