CVE-2025-36371

Medium · 6.5

CVSS

6.5

EPSS

0.3%

Published

Nov 19, 2025

CISA due date

—

The record

IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 are impacted by obtaining an information vulnerability in the database plan cache implementation. A user with access to the database plan cache could see information they do not have authority to view.

Affected packages

Ecosystem	Package	Introduced	Fixed