Vulnerability · Published Jun 22, 2026 · Assigned by ibm
CVE-2025-2669Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data.
Medium 6.0
In plain English
A medium-severity improper certificate validation in Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data from IBM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 28% of all known vulnerabilities).
Severity (CVSS 3.1)6.0Medium
Exploit odds (30 days)0.3%top 72.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data versions 4.8, 5.0, 5.1, 5.2, 5.3 could allow a privileged user to perform operations and obtain sensitive information outside of their authority due to improper token validation.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| IBM | Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data | 4.8.05.0.0 – through 5.3.0 |
Weakness: CWE-295 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:L
References
- https://www.ibm.com/support/pages/node/7277112 vendor-advisory, patch