PT-2026-20253 · Ibm · Ibm Db2

CVE-2025-36425 · Publicado 2026-02-17 · Atualizado 2026-02-17

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Db2 versions 11.5.0 through 11.5.9 IBM Db2 versions 12.1.0 through 12.1.3

Description The software may allow an authenticated user to obtain sensitive information when configured for High Availability Disaster Recovery (HADR). The issue occurs under specific HADR configurations.

Recommendations Update IBM Db2 to a version later than 11.5.9. Update IBM Db2 to a version later than 12.1.3.

Correção

Enumeração de Fraquezas

CWE-256

Identificadores relacionados

CVE-2025-36425

Produtos afetados

Ibm Db2

Referências · 3

• https://ibm.com/support/pages/node/7259962 · Correção, Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2025-36425 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-36425 · Nota de Segurança