Client-Side Security Flaw in IBM Db2 Intelligence Center
CVE-2025-14687

4.3MEDIUM

Key Information:

Vendor

IBM
Status
Db2 Intelligence Center
Vendor
CVE Published:
26 December 2025

What is CVE-2025-14687?

A client-side security vulnerability has been identified in IBM Db2 Intelligence Center versions 1.1.0, 1.1.1, and 1.1.2, which could potentially allow authenticated users to execute unauthorized actions. This issue arises from the inadequate enforcement of server-side security mechanisms on the client side. Organizations utilizing these versions should assess their security posture and consider applying recommended security patches to mitigate potential risks.

Affected Version(s)

Db2 Intelligence Center 1.1.0, 1.1.1, 1.1.2

References

https://www.ibm.com/support/pages/node/7255160
vendor-advisorypatch

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-14687 : Client-Side Security Flaw in IBM Db2 Intelligence Center