CVE-2025-36428 | IBM DB2/DB2 Connect Server up to 11.5.9/12.1.3 RPSCAN Feature improper validation of specified quantity in input

A vulnerability described as problematic has been identified in IBM DB2 and DB2 Connect Server up to 11.5.9/12.1.3. Affected by this issue is some unknown functionality of the component RPSCAN Feature. Such manipulation leads to improper validation of specified quantity in input.

This vulnerability is documented as CVE-2025-36428. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.