Unrated severityNVD Advisory· Published Jul 23, 2025· Updated Aug 18, 2025
IBM Db2 Mirror for i cross-site websocket hijacking
CVE-2025-36116
Description
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 GUI is affected by cross-site WebSocket hijacking vulnerability. By sending a specially crafted request, an unauthenticated malicious actor could exploit this vulnerability to sniff an existing WebSocket connection to then remotely perform operations that the user is not allowed to perform.
Affected products
2- IBM/Db2 Mirror for iv5cpe:2.3:a:ibm:db2_mirror_for_i:7.4:*:*:*:*:*:*:*Range: 7.4, 7.5, 7.6
- Range: 7.4, 7.5, 7.6
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- www.ibm.com/support/pages/node/7240351mitrevendor-advisorypatch
News mentions
0No linked articles in our index yet.