CVE-2026-9036

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-9036", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2026-05-19T16:54:27.268Z", "datePublished": "2026-09-03T20:42:08.092Z", "dateUpdated": "2026-09-10T21:00:35.774Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-09-03T20:42:08.092Z"}, "title": "Vulnerabilities exists in IBM Netezza Software", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-295", "description": "CWE-295 Improper Certificate Validation", "type": "CWE"}]}], "affected": [{"vendor": "IBM", "product": "Netezza Software", "versions": [{"status": "affected", "version": "11.3.0.3", "lessThanOrEqual": "Interim Fix 002", "versionType": "semver"}], "cpes": ["cpe:2.3:a:ibm:netezza_software:11.3.0.3:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:netezza_software:interim:interim_fix_002:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques.</p>"}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7284359", "tags": ["vendor-advisory", "patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseSeverity": "MEDIUM", "baseScore": 5.9, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"}}], "solutions": [{"lang": "en", "value": "IBM strongly recommends addressing the vulnerability now.\n\n\n\n\n\nFixed Version\n\n\n\nRemediation/Fixes: 11.3.1.3\n\n\n\nIBM Netezza Software\n\n\n\nAvailable from https://w3.ibm.com/w3publisher/software-downloads", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<div><p>IBM strongly recommends addressing the vulnerability now.</p></div><div><table><colgroup><col/><col/></colgroup><tbody><tr><td><p>Fixed Version</p></td><td><p>Remediation/Fixes: 11.3.1.3</p></td></tr><tr><td><p>IBM Netezza Software</p></td><td><p>Available from <a href=\"https://w3.ibm.com/w3publisher/software-downloads\" rel=\"nofollow\">https://w3.ibm.com/w3publisher/software-downloads</a></p></td></tr></tbody></table></div><p></p>"}]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-9036", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-09-10T20:38:54.215185Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-10T21:00:35.774Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-9036", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-09-10T20:38:54.215185Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-10T20:57:15.990Z"}}], "cna": {"title": "Vulnerabilities exists in IBM Netezza Software", "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:a:ibm:netezza_software:11.3.0.3:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:netezza_software:interim:interim_fix_002:*:*:*:*:*:*"], "vendor": "IBM", "product": "Netezza Software", "versions": [{"status": "affected", "version": "11.3.0.3", "versionType": "semver", "lessThanOrEqual": "Interim Fix 002"}]}], "solutions": [{"lang": "en", "value": "IBM strongly recommends addressing the vulnerability now.\n\n\n\n\n\nFixed Version\n\n\n\nRemediation/Fixes: 11.3.1.3\n\n\n\nIBM Netezza Software\n\n\n\nAvailable from https://w3.ibm.com/w3publisher/software-downloads", "supportingMedia": [{"type": "text/html", "value": "<div><p>IBM strongly recommends addressing the vulnerability now.</p></div><div><table><colgroup><col/><col/></colgroup><tbody><tr><td><p>Fixed Version</p></td><td><p>Remediation/Fixes: 11.3.1.3</p></td></tr><tr><td><p>IBM Netezza Software</p></td><td><p>Available from <a href=\"https://w3.ibm.com/w3publisher/software-downloads\" rel=\"nofollow\">https://w3.ibm.com/w3publisher/software-downloads</a></p></td></tr></tbody></table></div><p></p>", "base64": false}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7284359", "tags": ["vendor-advisory", "patch"]}], "descriptions": [{"lang": "en", "value": "IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques.", "supportingMedia": [{"type": "text/html", "value": "<p>IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-295", "description": "CWE-295 Improper Certificate Validation"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-09-03T20:42:08.092Z"}}}, "cveMetadata": {"cveId": "CVE-2026-9036", "state": "PUBLISHED", "dateUpdated": "2026-09-10T21:00:35.774Z", "dateReserved": "2026-05-19T16:54:27.268Z", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "datePublished": "2026-09-03T20:42:08.092Z", "assignerShortName": "ibm"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:ibm:netezza_software:11.3.0.3:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:netezza_software:interim:interim_fix_002:*:*:*:*:*:*"], "product": "Netezza Software", "vendor": "IBM", "versions": [{"lessThanOrEqual": "Interim Fix 002", "status": "affected", "version": "11.3.0.3", "versionType": "semver"}]}], "source": "psirt@us.ibm.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:netezza_performance_server:*:*:*:*:*:*:*:*", "matchCriteriaId": "4C42720F-E9C7-41EE-82D6-79C615B310B8", "versionEndExcluding": "11.3.1.3", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques."}], "id": "CVE-2026-9036", "lastModified": "2026-09-10T21:17:53.300", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 3.6, "source": "psirt@us.ibm.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-9036", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-09-10T20:38:54.215185Z", "version": "2.0.3"}}]}, "published": "2026-09-03T21:17:24.440", "references": [{"source": "psirt@us.ibm.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://www.ibm.com/support/pages/node/7284359"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-295"}], "source": "psirt@us.ibm.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[11.3.0.3,Interim Fix 002]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "product": "netezza_software", "vendor": "ibm"}], "created": "2026-09-03T22:30:10.885618+00:00", "updated": "2026-09-04T15:22:01.023211+00:00", "vendors": ["ibm", "ibm$PRODUCT$netezza_software"]}