Medium · 4.3 CVE-2025-14687 EUVD-2025-205431GHSA-cjc8-9v4p-h4r5

Client-Side Enforcement of Server-Side Security in IBM Db2 Intelligence Center

Published Dec 26, 2025 · Updated Dec 26, 2025 · Assigned by ibm

Vendor: IBM Product: Db2 Intelligence Center

Description

IBM Db2 Intelligence Center 1.1.0, 1.1.1, 1.1.2 could allow an authenticated user to perform unauthorized actions due to client-side enforcement of sever side security mechanisms.

Affected products

Vendor	Product	Affected	Fixed
IBM	Db2 Intelligence Center	1.1.0, 1.1.1, 1.1.2	—

References

https://www.ibm.com/support/pages/node/7255160 vendor-advisory patch