← Back

CVE-2025-13108

nvd nist
Published: Feb 17, 2026Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

IBM DB2 Merge Backup for Linux, UNIX and Windows 12.1.0.0 could allow an attacker to access sensitive information in memory due to the buffer not properly clearing resources.

Affected (3)

Ibm
1 product
Db2 Merge Backup
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Db2 Merge Backup
Version 12.1.0.0
Db2 Merge Backup
Version 12.1.0.0
Db2 Merge Backup
Version 12.1.0.0

Related CWEs

CWE-226
Sensitive Information in Resource Not Removed Before Reuse
The product releases a resource such as memory or a file so that it can be made available for reuse, but it does not clear or "zeroize" the information contained in the resource before the product performs a critical state transition or makes the resource available for reuse by other entities.

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.