CVE-2025-13755CWE-532

IBM® Db2® is vulnerable to credential exposure in db2diag when executing specific testcase buckets

Medium · published May 26, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
1.1
In the wild
Unconfirmed
What it is

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes DB2 Connect Server) stores potentially sensitive information in log files that could be read by a local user.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00108 · 1.1th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2026-05-26T15:46Z
EPSS history
Timeline
  • 26 MAY 15:46Z
    IBM® Db2® is vulnerable to credential exposure in db2diag when executing specific testcase buckets
    cvelistv5