Skip to content
OpenAdvisories
Medium · 5.5 CVE-2025-36372 EUVD-2025-210373GHSA-849g-4qqp-r4r8

IBM® Db2® could disclose sensitive information to an authenticated user from the monitoring and event tables

Published Jun 30, 2026 · Updated Jul 1, 2026 · Assigned by ibm

Description

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could disclose sensitive information to an authenticated user from the monitoring and event tables.

Affected products

VendorProductAffectedFixed
IBM Db2 11.5.0 – ≤ 11.5.9, 12.1.0 – ≤ 12.1.4 —

Advisories 1

References