What’s Vulnerable › Vulnerabilities
CVE-2025-13108: Fixes to common vulnerabilities found in IBM Db2 Merge Backup for Linux, UNIX and Windows
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-02-17 · updated 2026-06-17
- Weakness: CWE-226
Description
IBM DB2 Merge Backup for Linux, UNIX and Windows 12.1.0.0 could allow an attacker to access sensitive information in memory due to the buffer not properly clearing resources.
Affected products
References
Get alerted when CVE-2025-13108 or the next vulnerability affects your stack