CVE-2025-36047

IBM WebSphere Application Server Liberty 18.0.0.2 through 25.0.0.8 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources.

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://www.ibm.com/support/pages/node/7242086	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:liberty:*:*:*

OR	cpe:2.3:o:apple:macos:-:::::::*
	cpe:2.3:o:ibm:aix:-:::::::*
	cpe:2.3:o:ibm:i:-:::::::*
	cpe:2.3:o:ibm:z\/os:-:::::::*
	cpe:2.3:o:linux:linux_kernel:-:::::::*
	cpe:2.3:o:microsoft:windows:-:::::::*

History

18 Aug 2025, 17:25

Type	Values Removed	Values Added
CPE		cpe:2.3:o:ibm:aix:-:::::::* cpe:2.3:a:ibm:websphere_application_server:::::liberty:::* cpe:2.3:o:linux:linux_kernel:-:::::::* cpe:2.3:o:ibm:z\/os:-:::::::* cpe:2.3:o:apple:macos:-:::::::* cpe:2.3:o:ibm:i:-:::::::* cpe:2.3:o:microsoft:windows:-:::::::*
References	~~() https://www.ibm.com/support/pages/node/7242086 -~~	() https://www.ibm.com/support/pages/node/7242086 - Vendor Advisory
Summary		(es) IBM WebSphere Application Server Liberty 18.0.0.2 a 25.0.0.8 es vulnerable a una denegación de servicio, causada por el envío de una solicitud especialmente manipulada. Un atacante remoto podría aprovechar esta vulnerabilidad para que el servidor consuma recursos de memoria.
First Time		Apple Linux Ibm aix Microsoft Ibm Ibm websphere Application Server Ibm i Microsoft windows Apple macos Linux linux Kernel Ibm z\/os

14 Aug 2025, 16:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-08-14 16:15

Updated : 2025-08-18 17:25

NVD link : CVE-2025-36047

Mitre link : CVE-2025-36047

CVE.ORG link : CVE-2025-36047

JSON object : View

Products Affected

apple

macos

ibm

websphere_application_server
i
z\/os
aix

microsoft

windows

linux

linux_kernel

CWE

CWE-770

Allocation of Resources Without Limits or Throttling

{"id": "CVE-2025-36047", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "psirt@us.ibm.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 3.9}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2025-08-14T16:15:32.787", "references": [{"url": "https://www.ibm.com/support/pages/node/7242086", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "psirt@us.ibm.com", "description": [{"lang": "en", "value": "CWE-770"}]}], "descriptions": [{"lang": "en", "value": "IBM WebSphere Application Server Liberty 18.0.0.2 through 25.0.0.8 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources."}, {"lang": "es", "value": "IBM WebSphere Application Server Liberty 18.0.0.2 a 25.0.0.8 es vulnerable a una denegaci\u00f3n de servicio, causada por el env\u00edo de una solicitud especialmente manipulada. Un atacante remoto podr\u00eda aprovechar esta vulnerabilidad para que el servidor consuma recursos de memoria."}], "lastModified": "2025-08-18T17:25:11.113", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:liberty:*:*:*", "vulnerable": true, "matchCriteriaId": "AA748C98-80DB-4804-81A7-29EEBA3C6DB9", "versionEndExcluding": "25.0.0.9", "versionStartIncluding": "18.0.0.2"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"}, {"criteria": "cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E492C463-D76E-49B7-A4D4-3B499E422D89"}, {"criteria": "cpe:2.3:o:ibm:i:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C684FC45-C9BA-4EF0-BD06-BB289450DD21"}, {"criteria": "cpe:2.3:o:ibm:z\\/os:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0E97A964-6F9E-4C87-9B90-21AE2C1DF52F"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}, {"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@us.ibm.com"}