IBM Db2 and Cognos Security Bulletin: Multiple CVEs (Privilege Escalation, DoS, Info Disclosure)

Critical Vulnerability Information Security Bulletin: IBM Cognos Analytics Certified Containers is affected by security vulnerabilities - Product: IBM Cognos Analytics - CVE ID: CVE-2022-31197 - Severity: Medium - Release Date: 2025-11-07 Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Operator package issues - Product: IBM Watson Speech Services Cartridge - CVE ID: CVE-2022-29458 - Severity: Medium - Release Date: 2025-11-07 Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Base OS issues - Product: IBM Watson Speech Services Cartridge - CVE ID: CVE-2022-29458 - Severity: Medium - Release Date: 2025-11-07 Security Bulletin: IBM® Db2® is vulnerable to a denial of service due to the database monitor script incorrectly detecting that the instance is still starting under specific conditions (CVE-2025-36136) - Product: Db2 for Linux, UNIX and Windows - CVE ID: CVE-2025-36136 - Severity: Medium - Release Date: 2025-11-07 Security Bulletin: IBM® Db2® is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query (CVE-2025-2534) - Product: Db2 for Linux, UNIX and Windows - CVE ID: CVE-2025-2534 - Severity: Medium - Release Date: 2025-11-07 Security Bulletin: IBM® Db2® is vulnerable to a denial of service due to improper neutralization of special elements in data query logic (CVE-2025-36185) - Product: Db2 for Linux, UNIX and Windows - CVE ID: CVE-2025-36185 - Severity: Medium - Release Date: 2025-11-07 Security Bulletin: IBM® Db2® is vulnerable to privilege escalation under specific configurations (CVE-2025-36186) - Product: Db2 for Linux, UNIX and Windows - CVE ID: CVE-2025-36186 - Severity: High - Release Date: 2025-11-07 Security Bulletin: IBM® Db2® is vulnerable to information disclosure and credential exposure to privileged users under specific conditions (CVE-2025-36131) - Product: Db2 for Linux, UNIX and Windows - CVE ID: CVE-2025-36131 - Severity: Medium - Release Date: 2025-11-07 Security Bulletin: IBM® Db2® federated Server is vulnerable to sensitive information disclosure under specific conditions (PRISMA-2021-0055) - Product: Db2 for Linux, UNIX and Windows - CVE ID: PRISMA-2021-0055 - Severity: Low - Release Date: 2025-11-07 Security Bulletin: IBM® Db2® is vulnerable to a denial of service due to improper allocation of resources (CVE-2025-36008) - Product: Db2 for Linux, UNIX and Windows - CVE ID: CVE-2025-36008 - Severity: Medium - Release Date: 2025-11-07

Goal Reached Thanks to every supporter — we hit 100%!

IBM Db2 and Cognos Security Bulletin: Multiple CVEs (Privilege Escalation, DoS, Info Disclosure)