What is GHSA-849g-4qqp-r4r8?

GHSA-849g-4qqp-r4r8 is a security advisory published by GitHub Security Advisories with Medium severity. IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes...

Which CVE IDs does GHSA-849g-4qqp-r4r8 cover?

GHSA-849g-4qqp-r4r8 covers the following CVE IDs: CVE-2025-36372. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-849g-4qqp-r4r8?

GHSA-849g-4qqp-r4r8 has a CVSS v3 base score of 5.5, published by GitHub Security Advisories.

GHSA-849g-4qqp-r4r8MediumCVSS 5.5

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes...

Vendor

GitHub Security Advisories

Published

June 30, 2026

Last Modified

June 30, 2026

🔗 CVE IDs covered (1)

CVE-2025-36372 →

📋 Description

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could disclose sensitive information to an authenticated user from the monitoring and event tables.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2025-36372
https://www.ibm.com/support/pages/node/7277417
https://github.com/advisories/GHSA-849g-4qqp-r4r8