IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 are impacted by obtaining an information vulnerability in the database plan cache implementation. A user with access to the database plan cache could see information they do not have authority to view.
References
| Link | Resource |
|---|---|
| https://www.ibm.com/support/pages/node/7251699 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
24 Nov 2025, 14:57
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:ibm:i:7.2:*:*:*:*:*:*:* cpe:2.3:a:ibm:i:7.6:*:*:*:*:*:*:* cpe:2.3:a:ibm:i:7.5:*:*:*:*:*:*:* cpe:2.3:a:ibm:i:7.4:*:*:*:*:*:*:* cpe:2.3:a:ibm:i:7.3:*:*:*:*:*:*:* |
|
| First Time |
Ibm i
Ibm |
|
| References | () https://www.ibm.com/support/pages/node/7251699 - Vendor Advisory |
19 Nov 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-11-19 20:15
Updated : 2025-11-24 14:57
NVD link : CVE-2025-36371
Mitre link : CVE-2025-36371
CVE.ORG link : CVE-2025-36371
JSON object : View
Products Affected
ibm
- i
CWE
CWE-598
Use of GET Request Method With Sensitive Query Strings