CVE-2025-33079

6.5 mediumEPSS 0.3%

Medium (6.5) in ibm. EPSS 0.3% chance of exploitation in the next 30 days.

IBM Controller 11.0.0, 11.0.1, and 11.1.0 application could allow an authenticated user to obtain sensitive credentials that may be inadvertently included within the source code.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 25% of CVEs (scores of 2026-10-31)
CWEs: CWE-522, CWE-256
Published: 2025-05-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:cognos_controller
ibm:controller

References

https://www.ibm.com/support/pages/node/7234720

Check your stack JSON