CVE-2025-36157

9.1 criticalEPSS 0.6%

Critical (9.1) in ibm jazz foundation. EPSS 0.6% chance of exploitation in the next 30 days.

IBM Jazz Foundation 7.0.2 to 7.0.2 iFix035, 7.0.3 to 7.0.3 iFix018, and 7.1.0 to 7.1.0 iFix004 could allow an unauthenticated remote attacker to update server property files that would allow them to perform unauthorized actions.

Severity

CVSS 3.1

9.1 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 50% of CVEs (scores of 2026-10-31)
CWE: CWE-863
Published: 2025-08-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:jazz_foundation

References

https://www.ibm.com/support/pages/node/7242925

Check your stack JSON