CVE-2025-36008

Medium · 6.5

CVSS

6.5

EPSS

0.3%

Published

Nov 7, 2025

CISA due date

—

The record

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user to cause a denial of service due to improper allocation of resources.

Affected packages

Ecosystem	Package	Introduced	Fixed