CVEvulnerability

CVE-2025-36116

6.3 MEDIUM Published 2025-07-23 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-07-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Weaknesses
CWE-1385

Description

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 GUI is affected by cross-site WebSocket hijacking vulnerability. By sending a specially crafted request, an unauthenticated malicious actor could exploit this vulnerability to sniff an existing WebSocket connection to then remotely perform operations that the user is not allowed to perform.

Affected configurations

• ibm db2 mirror for i 7.4 • ibm db2 mirror for i 7.5 • ibm db2 mirror for i 7.6

Related

Weakness · CWE (1)

  • CWE-1385 Missing Origin Validation in WebSockets weakness

References