CVE-2025-36124

High

IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.8 could allow a remote attacker to bypass security restrictions caused by…

ibm·CWE-268·Published 2025-08-12

CVSS

7.5

EPSS

0.00

KEV

Exploits

cve.orgen

185 chars

IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.8 could allow a remote attacker to bypass security restrictions caused by a failure to honor JMS messaging configuration

NVDen

185 chars

IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.8 could allow a remote attacker to bypass security restrictions caused by a failure to honor JMS messaging configuration

NVDes

197 chars

IBM WebSphere Application Server Liberty 17.0.0.3 a 25.0.0.8 podría permitir que un atacante remoto eluda las restricciones de seguridad causadas por un fallo en la configuración de mensajería JMS.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	NVD	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
3.1	Primary	cve.org	5.9	—	—	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H