CVE-2025-36185

Medium · 5.5

CVSS

5.5

EPSS

0.1%

Published

Nov 7, 2025

CISA due date

—

The record

IBM Db2 12.1.0 through 12.1.2 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow a local user to cause a denial of service due to improper neutralization of special elements in data query logic.

Affected packages

Ecosystem	Package	Introduced	Fixed