ByteOS Network

NVD Vulnerability Details :

CVE-2025-36116

Analyzed

Source-psirt@us.ibm.com

Published At-23 Jul, 2025 | 15:15

Updated At-07 Aug, 2025 | 14:36

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 GUI is affected by cross-site WebSocket hijacking vulnerability. By sending a specially crafted request, an unauthenticated malicious actor could exploit this vulnerability to sniff an existing WebSocket connection to then remotely perform operations that the user is not allowed to perform.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	6.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CPE Matches

IBM Corporation

>>db2_mirror_for_i>>7.4

cpe:2.3:a:ibm:db2_mirror_for_i:7.4:*:*:*:*:*:*:*

IBM Corporation

>>db2_mirror_for_i>>7.5

cpe:2.3:a:ibm:db2_mirror_for_i:7.5:*:*:*:*:*:*:*

IBM Corporation

>>db2_mirror_for_i>>7.6

cpe:2.3:a:ibm:db2_mirror_for_i:7.6:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-1385	Primary	psirt@us.ibm.com

References

Hyperlink	Source	Resource
https://www.ibm.com/support/pages/node/7240351	psirt@us.ibm.com	Vendor Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History