CVE-2025-36372

6.5 mediumEPSS 0.3%

Medium (6.5) in ibm db2. EPSS 0.3% chance of exploitation in the next 30 days.

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could disclose sensitive information to an authenticated user from the monitoring and event tables.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 23% of CVEs (scores of 2026-10-31)
CWE: CWE-538
Published: 2026-06-30
Modified: 2026-09-29
Record from: the NVD, synced 2026-10-19

Affected

ibm:db2

References

https://www.ibm.com/support/pages/node/7277417

Check your stack JSON