CVE-2025-36442

🗓️ 01 Feb 2026 03:14:10Reported by redhat.comType

redhatcve

redhatcve🔗 access.redhat.com👁 3 Views

CVE-2025-36442: IBM Db2 server may crash and cause denial of service from a crafted query with XML columns.

Reporter	Title	Published	Views	Family All 20
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities have been identified in IBM DB2 shipped with IBM WebSphere Remote Server	10 Feb 202603:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Db2® is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query (CVE-2025-36442)	29 Jan 202615:12	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities in IBM DB2 bundled with IBM Application Performance Management products.	17 Feb 202613:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM® Db2® affect IBM® Db2® Big SQL on IBM Cloud Pak for Data.	15 May 202614:46	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM Db2 shipped with IBM Guardium Key Lifecycle Manager (SKLM/GKLM)	13 Feb 202608:51	–	ibm
ATTACKERKB	CVE-2025-36442	30 Jan 202621:18	–	attackerkb
Circl	CVE-2025-36442	19 Mar 202600:00	–	circl
CNNVD	IBM Db2 安全漏洞	30 Jan 202600:00	–	cnnvd
CNVD	IBM Db2 Denial of Service Vulnerability (CNVD-2026-14679)	11 Feb 202600:00	–	cnvd
CVE	CVE-2025-36442	30 Jan 202621:18	–	cve

Source	Link
cve	www.cve.org/CVERecord

01 Feb 2026 03:14Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.16.5 - 7.5

EPSS0.00046

SSVC

IBM Db2 denial of service XML columns Linux Unix Windows server crash