Skip to content
Sign in
5.3 Medium

CVE-2025-36428 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 could allow an…

Description

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in data query logic when the RPSCAN feature is enabled.

Affected products and versions

Product Affected versions Fixed in
DB2 for Linux, UNIX and Windows 12.1 12.1.0 → 12.1.3 No fix stated
DB2 for Linux, UNIX and Windows 11.5 11.5.0 → 11.5.9 No fix stated

Other CVEs of DB2 for Linux, UNIX and Windows

The 168 CVEs of DB2 for Linux, UNIX and Windows →
CVE-2025-36247 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.3 is… 7.1 High CVE-2025-36425 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.3… 5.3 Medium CVE-2025-13867 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0… 6.5 Medium CVE-2025-14689 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 12.1.0 through 12.1.3 could allow an authenticated… 6.5 Medium
Track this CVE