CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-36097

IBM WebSphere Application Server 9.0 and WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.7 are vulnerable to a denial of service, caused by a stack-based overflow. An attacker can send a specially crafted request that cause the server to consume excessive memory resources.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 15.5%

CVSS Severity

CVSS v3 Score 7.5

References

https://www.ibm.com/support/pages/node/7239856

Products affected by CVE-2025-36097

Ibm » Websphere Application Server » Version: 17.0.0.3

cpe:2.3:a:ibm:websphere_application_server:17.0.0.3
Ibm » Websphere Application Server » Version: 17.0.0.4

cpe:2.3:a:ibm:websphere_application_server:17.0.0.4
Ibm » Websphere Application Server » Version: 18.0.0.1

cpe:2.3:a:ibm:websphere_application_server:18.0.0.1
Ibm » Websphere Application Server » Version: 18.0.0.2

cpe:2.3:a:ibm:websphere_application_server:18.0.0.2
Ibm » Websphere Application Server » Version: 18.0.0.3

cpe:2.3:a:ibm:websphere_application_server:18.0.0.3
Ibm » Websphere Application Server » Version: 18.0.0.4

cpe:2.3:a:ibm:websphere_application_server:18.0.0.4
Ibm » Websphere Application Server » Version: 19.0.0.1

cpe:2.3:a:ibm:websphere_application_server:19.0.0.1
Ibm » Websphere Application Server » Version: 19.0.0.10

cpe:2.3:a:ibm:websphere_application_server:19.0.0.10
Ibm » Websphere Application Server » Version: 19.0.0.11

cpe:2.3:a:ibm:websphere_application_server:19.0.0.11
Ibm » Websphere Application Server » Version: 19.0.0.12

cpe:2.3:a:ibm:websphere_application_server:19.0.0.12
Ibm » Websphere Application Server » Version: 19.0.0.2

cpe:2.3:a:ibm:websphere_application_server:19.0.0.2
Ibm » Websphere Application Server » Version: 19.0.0.3

cpe:2.3:a:ibm:websphere_application_server:19.0.0.3
Ibm » Websphere Application Server » Version: 19.0.0.4

cpe:2.3:a:ibm:websphere_application_server:19.0.0.4
Ibm » Websphere Application Server » Version: 19.0.0.5

cpe:2.3:a:ibm:websphere_application_server:19.0.0.5
Ibm » Websphere Application Server » Version: 19.0.0.6

cpe:2.3:a:ibm:websphere_application_server:19.0.0.6
Ibm » Websphere Application Server » Version: 19.0.0.7

cpe:2.3:a:ibm:websphere_application_server:19.0.0.7
Ibm » Websphere Application Server » Version: 19.0.0.8

cpe:2.3:a:ibm:websphere_application_server:19.0.0.8
Ibm » Websphere Application Server » Version: 19.0.0.9

cpe:2.3:a:ibm:websphere_application_server:19.0.0.9
Ibm » Websphere Application Server » Version: 20.0.0.1

cpe:2.3:a:ibm:websphere_application_server:20.0.0.1
Ibm » Websphere Application Server » Version: 20.0.0.10

cpe:2.3:a:ibm:websphere_application_server:20.0.0.10
Ibm » Websphere Application Server » Version: 20.0.0.11

cpe:2.3:a:ibm:websphere_application_server:20.0.0.11
Ibm » Websphere Application Server » Version: 20.0.0.12

cpe:2.3:a:ibm:websphere_application_server:20.0.0.12
Ibm » Websphere Application Server » Version: 20.0.0.2

cpe:2.3:a:ibm:websphere_application_server:20.0.0.2
Ibm » Websphere Application Server » Version: 20.0.0.3

cpe:2.3:a:ibm:websphere_application_server:20.0.0.3
Ibm » Websphere Application Server » Version: 20.0.0.4

cpe:2.3:a:ibm:websphere_application_server:20.0.0.4
Ibm » Websphere Application Server » Version: 20.0.0.5

cpe:2.3:a:ibm:websphere_application_server:20.0.0.5
Ibm » Websphere Application Server » Version: 20.0.0.6

cpe:2.3:a:ibm:websphere_application_server:20.0.0.6
Ibm » Websphere Application Server » Version: 20.0.0.7

cpe:2.3:a:ibm:websphere_application_server:20.0.0.7
Ibm » Websphere Application Server » Version: 20.0.0.8

cpe:2.3:a:ibm:websphere_application_server:20.0.0.8
Ibm » Websphere Application Server » Version: 20.0.0.9

cpe:2.3:a:ibm:websphere_application_server:20.0.0.9
Ibm » Websphere Application Server » Version: 21.0.0.1

cpe:2.3:a:ibm:websphere_application_server:21.0.0.1
Ibm » Websphere Application Server » Version: 21.0.0.10

cpe:2.3:a:ibm:websphere_application_server:21.0.0.10
Ibm » Websphere Application Server » Version: 21.0.0.12

cpe:2.3:a:ibm:websphere_application_server:21.0.0.12
Ibm » Websphere Application Server » Version: 21.0.0.2

cpe:2.3:a:ibm:websphere_application_server:21.0.0.2
Ibm » Websphere Application Server » Version: 21.0.0.3

cpe:2.3:a:ibm:websphere_application_server:21.0.0.3
Ibm » Websphere Application Server » Version: 21.0.0.4

cpe:2.3:a:ibm:websphere_application_server:21.0.0.4
Ibm » Websphere Application Server » Version: 21.0.0.5

cpe:2.3:a:ibm:websphere_application_server:21.0.0.5
Ibm » Websphere Application Server » Version: 22.0.0.1

cpe:2.3:a:ibm:websphere_application_server:22.0.0.1
Ibm » Websphere Application Server » Version: 22.0.0.5

cpe:2.3:a:ibm:websphere_application_server:22.0.0.5
Ibm » Websphere Application Server » Version: 22.0.0.6

cpe:2.3:a:ibm:websphere_application_server:22.0.0.6
Ibm » Websphere Application Server » Version: 23.0.0.3

cpe:2.3:a:ibm:websphere_application_server:23.0.0.3
Ibm » Websphere Application Server » Version: 24.0.0.3

cpe:2.3:a:ibm:websphere_application_server:24.0.0.3
Ibm » Websphere Application Server » Version: 24.0.0.4

cpe:2.3:a:ibm:websphere_application_server:24.0.0.4
Ibm » Websphere Application Server » Version: 24.0.0.5

cpe:2.3:a:ibm:websphere_application_server:24.0.0.5
Ibm » Websphere Application Server » Version: 24.0.0.6

cpe:2.3:a:ibm:websphere_application_server:24.0.0.6
Ibm » Websphere Application Server » Version: 9.0.0.0

cpe:2.3:a:ibm:websphere_application_server:9.0.0.0
Ibm » Websphere Application Server » Version: 9.0.5.1

cpe:2.3:a:ibm:websphere_application_server:9.0.5.1
Ibm » Websphere Application Server » Version: 9.0.5.15

cpe:2.3:a:ibm:websphere_application_server:9.0.5.15
Ibm » Websphere Application Server » Version: 9.0.5.16

cpe:2.3:a:ibm:websphere_application_server:9.0.5.16

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-36097

Products

Pricing

Contact Us