6.3
Medium
CVE-2025-36117 IBM Db2 Mirror for i 7.4, 7.5, and 7.6 does not disallow the session id after use which could allow an authenticated…
Description
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 does not disallow the session id after use which could allow an authenticated user to impersonate another user on the system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Db2 Mirror for i | Versions not published |
Other CVEs of Db2 Mirror for i
The 29 CVEs of Db2 Mirror for i →
CVE-2026-96012
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 is vulnerable to privilege escalation
9.9
Critical
CVE-2026-18104
IBM Db2 Mirror for i 7.6, 7.5, and 7.4 could allow a local attacker to obtain sensitive information due to the use of…
3.3
Low
CVE-2026-17047
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to obtain sensitive information due to improper…
5.4
Medium
CVE-2026-16660
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to cause a denial of service due to an…
5.3
Medium