CVEvulnerability
CVE-2025-13108
7.5 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2026-02-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-226
Description
IBM DB2 Merge Backup for Linux, UNIX and Windows 12.1.0.0 could allow an attacker to access sensitive information in memory due to the buffer not properly clearing resources.
Affected configurations
• ibm db2 merge backup 12.1.0.0
Related
Weakness · CWE (1)
- CWE-226 Sensitive Information in Resource Not Removed Before Reuse weakness
References
- https://www.ibm.com/support/pages/node/7260043 Vendor Advisory