PT-2026-20248 · Ibm · Ibm Db2

CVE-2025-36247 · Publicado 2026-02-17 · Atualizado 2026-02-22

Positive Technologies (AI Summary)

CVSS v3.1

8.2

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L

Name of the Vulnerable Software and Affected Versions IBM Db2 versions 11.5.0 through 11.5.9 IBM Db2 versions 12.1.0 through 12.1.3

Description The software is susceptible to an XML external entity (XXE) injection when handling XML data. A remote attacker may be able to leverage this issue to reveal sensitive information or exhaust memory resources.

Recommendations Update IBM Db2 to a version later than 11.5.9 Update IBM Db2 to a version later than 12.1.3

Correção

XXE

Enumeração de Fraquezas

CWE-611

Identificadores relacionados

CVE-2025-36247

Produtos afetados

Ibm Db2

Referências · 6

• https://twitter.com/VulmonFeeds/status/2023892817953599893 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-36247 · Nota de Segurança
• https://twitter.com/RedPacketSec/status/2023851148566781957 · Publicação no Twitter
• https://ibm.com/support/pages/node/7259961 · Correção, Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2025-36247 · Aviso do Fabricante
• https://twitter.com/cracbot/status/2025526050231583005 · Publicação no Twitter