# CVE-2025-36372

## Summary

- **CVE ID:** CVE-2025-36372
- **Severity:** MEDIUM
- **CVSS Score:** 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
- **CWE:** CWE-538
- **Published:** Jun 30, 2026
- **Last Modified:** Jul 1, 2026

## Description

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could disclose sensitive information to an authenticated user from the monitoring and event tables.

## Affected Products

- IBM — Db2 (11.5.0)
- IBM — Db2 (12.1.0)

## References

- [CNA](https://www.ibm.com/support/pages/node/7277417)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.30%
- **EPSS Percentile:** 22.7

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-10._