CVE-2025-36184
BaseFortify
Publication date: 2026-01-30
Last updated on: 2026-02-05
Assigner: IBM Corporation
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| ibm | db2 | From 11.5.0 (inc) to 11.5.9 (inc) |
| ibm | db2 | From 11.5.0 (inc) to 11.5.9 (inc) |
| ibm | db2 | From 11.5.0 (inc) to 11.5.9 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-250 | The product performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in IBM Db2 for Linux, UNIX, and Windows (versions 11.5.0 to 11.5.9) allows an instance owner to execute malicious code that escalates their privileges to root. This happens because the system executes unnecessary privileges at a higher level than the minimum required, enabling privilege escalation.
How can this vulnerability impact me? :
The vulnerability can lead to an instance owner gaining root-level privileges, which can result in full control over the affected system. This can lead to unauthorized access, data manipulation, disruption of services, and potential compromise of the entire system's security.