← back
CVE-2025-33012

IBM Db2 improper account lockout

CVSS 6.3 MEDIUMEPSS 0.1%CWE-324
IBM Db2 10.5.0 through 10.5.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux could allow an authenticated user to regain access after account lockout due to password use after expiration date.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Affected products
IBM · Db2

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →