CVE-2025-3319

9.8 criticalEPSS 0.4%

Critical (9.8) in ibm spectrum protect server. EPSS 0.4% chance of exploitation in the next 30 days.

IBM Spectrum Protect Server 8.1 through 8.1.26 could allow attacker to bypass authentication due to improper session authentication which can result in access to unauthorized resources.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 31% of CVEs (scores of 2026-10-31)
CWE: CWE-306
Published: 2025-06-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:spectrum_protect_server

References

https://www.ibm.com/support/pages/node/7236999

Check your stack JSON