CVE-2025-36136

Medium · 5.5

CVSS

5.5

EPSS

0.1%

Published

Nov 7, 2025

CISA due date

—

The record

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local user to cause a denial of service due to the database monitor script incorrectly detecting that the instance is still starting under specific conditions.

Affected packages

Ecosystem	Package	Introduced	Fixed