BaseFortify

Publication date: 2025-11-19

Last updated on: 2025-11-24

Assigner: IBM Corporation

Description

IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 are impacted by obtaining an information vulnerability in the database plan cache implementation. A user with access to the database plan cache could see information they do not have authority to view.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-19

Last Modified

2025-11-24

Generated

2026-07-06

AI Q&A

2025-11-19

EPSS Evaluated

2026-07-05

NVD

CVE-2025-36371

EUVD

EUVD-2025-198173

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	i	7.2
ibm	i	7.3
ibm	i	7.4
ibm	i	7.5
ibm	i	7.6

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-598	The web application uses the HTTP GET method to process a request and includes sensitive information in the query string of that request.

Attack-Flow Graph

Executive Summary

This vulnerability affects IBM i versions 7.2 through 7.6 and involves the database plan cache implementation. A user who has access to the database plan cache can obtain information that they are not authorized to view, leading to an information disclosure issue.

Impact Analysis

The vulnerability can lead to unauthorized disclosure of sensitive information from the database plan cache to users who should not have access to it. This could result in exposure of confidential data and potential misuse of that information.

Hi! I’m here to help you understand CVE-2025-36371. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70