CVE-2025-33012
IBM Db2 improper account lockout
At a glance Severity MEDIUM 6.3 EPSS EPSS 0.17 % · percentile 7 (2026-10-27) State PUBLISHED Published 2025-11-07 Updated 2025-11-07 Assigner ibm NVD status Analyzed Description IBM Db2 10.5.0 through 10.5.11, 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux could allow an authenticated user to regain access after account lockout due to password use after expiration date.
Scores Version Score Vector Scored by CVSS 3.1 MEDIUM 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L ibm CVSS 3.1 MEDIUM 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L NVD · psirt@us.ibm.com (Secondary) CVSS 3.1 HIGH 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H NVD · nvd@nist.gov (Primary)
Weaknesses (CWE)
European references
CERT-FR advisories
Affected configurations (NVD CPE) cpe:2.3:a:ibm:db2:*:*:*:*:*:linux:*:* ≥ 10.5.0.0 ≤ 10.5.0.11cpe:2.3:a:ibm:db2:*:*:*:*:*:linux:*:* ≥ 11.1.0 ≤ 11.1.4.7cpe:2.3:a:ibm:db2:*:*:*:*:*:linux:*:* ≥ 11.5.0 ≤ 11.5.9cpe:2.3:a:ibm:db2:*:*:*:*:*:linux:*:* ≥ 12.1.0 ≤ 12.1.3Affected products Product Versions IBM · Db2 affected 10.5.0 ≤ 10.5.11 ; affected 11.1.0 ≤ 11.1.4.7 ; affected 11.5.0 ≤ 11.5.9 ; affected 12.1.0 ≤ 12.1.3
References
Sources
