CVE-2025-36116: falha de média gravidade em IBM Db2 Mirror for i
IBM Db2 Mirror for i cross-site websocket hijacking
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.3epss 0.2%
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 GUI is affected by cross-site WebSocket hijacking vulnerability. By sending a specially crafted request, an unauthenticated malicious actor could exploit this vulnerability to sniff an existing WebSocket connection to then remotely perform operations that the user is not allowed to perform.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Produtos afetados
IBM · Db2 Mirror for iCVEs relacionadas — IBM Db2 Mirror for i
No mesmo produto, das mais perigosas para as menos.
CVE-2026-17179HIGHIBM Db2 Mirror for i is affected by multiple vulnerabilitiesEPSS 3.1%CVE-2026-16956CRITICALIBM Db2 Mirror for i is vulnerable to OS command injection []EPSS 0.9%CVE-2026-18554HIGHIBM Db2 Mirror for i is affected by multiple vulnerabilitiesEPSS 0.9%CVE-2026-16915HIGHIBM Db2 Mirror for i is affected by multiple vulnerabilitiesEPSS 0.9%CVE-2026-17184CRITICALIBM Db2 Mirror for i is affected by multiple vulnerabilitiesEPSS 0.8%CVE-2026-17182CRITICALIBM Db2 Mirror for i is affected by multiple vulnerabilitiesEPSS 0.7%