CVE-2025-36185 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	6.2 MEDIUM	LOCAL	LOW	NONE	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
ibm	CNA	6.2 MEDIUM	LOCAL	LOW	NONE	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CISA-ADP	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 6%

Vendor	Product	Version
ibm	db2	12.1.0 ≤ 𝑥 ≤ 12.1.2
ibm	db2	12.1.0 ≤ 𝑥 ≤ 12.1.2
ibm	db2	12.1.0 ≤ 𝑥 ≤ 12.1.2

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-943 - Improper Neutralization of Special Elements in Data Query Logic
The application generates a query intended to access or manipulate data in a data store such as a database, but it does not neutralize or incorrectly neutralizes special elements that can modify the intended logic of the query.

Vulnerability Media Exposure

[GERMAN] IBM DB2: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in IBM DB2 ausnutzen, um Informationen offenzulegen, um einen Denial of Service Angriff durchzuführen, um Sicherheitsvorkehrungen zu umgehen, und um seine Privilegien zu erhöhen.
Published: 2025-11-09T23:00:00+00:00

References

https://www.ibm.com/support/pages/node/7250487