Skip to content
OpenAdvisories
Medium · 6.0 CVE-2025-2669 EUVD-2025-210299GHSA-2r56-qgv4-c7wj

Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data.

Published Jun 22, 2026 · Updated Jun 22, 2026 · Assigned by ibm

Vendor: IBM Product: Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data

Description

IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data versions 4.8, 5.0, 5.1, 5.2, 5.3 could allow a privileged user to perform operations and obtain sensitive information outside of their authority due to improper token validation.

Affected products

VendorProductAffectedFixed
IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data 4.8.0, 5.0.0 – ≤ 5.3.0 —

References