CVE-2025-25048

6.5 mediumEPSS 0.3%

Medium (6.5) in ibm jazz foundation. EPSS 0.3% chance of exploitation in the next 30 days.

IBM Jazz Foundation 7.0.2 through 7.0.2 iFix033, 7.0.3 through 7.0.3 iFix012, and 7.1.0 through 7.1.0 iFix002 could allow an authenticated user to upload files to the system due to improper neutralization of sequences that can resolve to a restricted directory.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 25% of CVEs (scores of 2026-10-31)
CWE: CWE-23
Published: 2025-09-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:jazz_foundation

References

https://www.ibm.com/support/pages/node/7244014

Check your stack JSON