CVE-2025-36247

creationtimestamp| type| source ---|---|--- 2026-02-13 15:00:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3meqri7iqpx22...

Security Bulletin: IBM® Db2® is vulnerable to external entities parsing in XML (CVE-2025-36247)

Summary IBM® Db2® is vulnerable to an XML external entity injection XXE attack when processing XML data. Vulnerability Details CVEID:CVE-2025-36247 DESCRIPTION: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server is vulnerable to an XML external entity injection XXE attack when...