PT-2026-20253 · Ibm · Ibm Db2

Published 2026-02-17 · Updated 2026-02-17 · CVE-2025-36425

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Db2 versions 11.5.0 through 11.5.9 IBM Db2 versions 12.1.0 through 12.1.3

Description The software may allow an authenticated user to obtain sensitive information when configured for High Availability Disaster Recovery (HADR). The issue occurs under specific HADR configurations.

Recommendations Update IBM Db2 to a version later than 11.5.9. Update IBM Db2 to a version later than 12.1.3.

Fix

Weakness Enumeration

CWE-256

Related Identifiers

CVE-2025-36425

Affected Products

Ibm Db2

References · 3

• https://osv.dev/vulnerability/CVE-2025-36425 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-36425 · Security Note
• https://ibm.com/support/pages/node/7259962 · Patch, Vendor Advisory