CVE-2025-36131
MediumCVSS 4.6Exploitation Probability (EPSS)
Low risk6th percentile - higher than 6% of all known CVEs
Summary
The clpplus command in IBM Db2 for Linux, UNIX, and Windows exposes user credentials to the terminal, which could be obtained by a third party with physical access to the system.
Risk Assessment
A person with physical access to the terminal could capture user credentials, leading to unauthorized database access and potential data confidentiality breaches.
Recommendation
Restrict physical access to Db2 systems and consider using more secure authentication methods that do not expose credentials in the terminal.
Other vulnerabilities in IBM Db2
See all- CVE-2015-1935High
The scalar-function implementation in IBM DB2 versions 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote attackers to cause a denial of service or execute arbitrary code via unspecified vectors.
- CVE-2014-3094High
IBM DB2 has a stack-based buffer overflow affecting versions 9.7 through FP9a, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP4 on Linux, UNIX, and Windows. This allows remote authenticated users to execute arbitrary code via a crafted ALTER MODULE statement.
- CVE-2014-0907High
Multiple untrusted search path vulnerabilities in setuid and setgid programs in IBM DB2 9.5, 9.7 before FP9a, 9.8, 10.1 before FP3a, and 10.5 before FP3a on Linux and UNIX allow local users to gain root privileges via a Trojan horse library.
- CVE-2013-6744High
The Stored Procedure infrastructure in IBM DB2 versions 9.5, 9.7 before FP9a, 10.1 before FP3a, and 10.5 before FP3a on Windows allows remote authenticated users to gain privileges by leveraging the CONNECT privilege and the CREATE_EXTERNAL_ROUTINE authority.
- CVE-2026-10109Critical
IBM Db2 versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.4 are vulnerable to remote code execution due to improper handling of DRDA handshake before authentication.
- CVE-2026-17463Medium
IBM Db2 versions 11.5.0-11.5.9 and 12.1.0-12.1.5 for Linux, UNIX, and Windows (including DB2 Connect Server) may allow a remote authenticated attacker to cause a denial of service due to uncontrolled resource consumption.
- CVE-2026-16702Medium
IBM Db2 versions 11.5.0-11.5.9 and 12.1.0-12.1.5 for Linux, UNIX, and Windows (including DB2 Connect Server) may allow a remote authenticated attacker to cause a denial of service due to a null pointer dereference.
- CVE-2026-15955High
IBM Db2 versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 contain improper validation of file paths. A remote attacker could exploit this to perform an arbitrary file write.
- CVE-2026-87958High
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service where a specific functionality on a Db2 server can be disabled by a privileged user under certain conditions.
- CVE-2026-86093High
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an attacker with the ability to control or impersonate a DRDA server endpoint to execute arbitrary commands on Db2 clients due to a stack-based buffer overflow that improperly copies user-controlled data into a fixed-size stack buffer without bounds checking.
Original NVD description (English source)
IBM Db2 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) clpplus command exposes user credentials to the terminal which could be obtained by a third party with physical access to the system.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS