Cyber Resilience

CVE-2025-36116

Medium

Published: 23 July 2025

Published
23 July 2025
Modified
07 August 2025
KEV Added
—
Patch
—
CVSS Score v3.1 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
EPSS Score 0.0012 30.5th percentile
Risk Priority 13 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2025-36116 is a medium-severity Missing Origin Validation in WebSockets (CWE-1385) vulnerability in Ibm Db2 Mirror For I. Its CVSS base score is 6.3 (Medium).

Operationally, ranked at the 30.5th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 GUI is affected by cross-site WebSocket hijacking vulnerability. By sending a specially crafted request, an unauthenticated malicious actor could exploit this vulnerability to sniff an existing WebSocket connection to then remotely…

more

perform operations that the user is not allowed to perform.

CWE(s)
CWE-1385

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

ibm
db2 mirror for i
7.4, 7.5, 7.6

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References