PT-2026-5461

CVE-2025-36442

·

Published

2026-01-30

·

Updated

2026-10-09

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) versions 11.5.0 through 11.5.9 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) versions 12.1.0 through 12.1.3
Description The software may experience a denial of service if it receives a specially crafted query containing XML columns. This can cause the server to crash under specific conditions.
Recommendations IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) versions 11.5.0 through 11.5.9 should be updated. IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) versions 12.1.0 through 12.1.3 should be updated.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-943: Improper Neutralization of Special Elements in Data Query Logic
Related identifiers
CVE-2025-36442
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com