PT-2025-28199 · Ibm · Ibm Integration Bus

Published 2025-07-07 · Updated 2025-08-14 · CVE-2025-36014

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: IBM Integration Bus for z/OS versions 10.1.0.0 through 10.1.0.5

Description: The issue allows for code injection by a privileged user with access to the IIB install directory.

Recommendations: For versions 10.1.0.0 through 10.1.0.5, consider restricting access to the IIB install directory to prevent code injection attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

BDU:2025-10478

CVE-2025-36014

Affected Products

Ibm Integration Bus

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-36014 · Security Note
• https://bdu.fstec.ru/vul/2025-10478 · Security Note
• https://osv.dev/vulnerability/CVE-2025-36014 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1942314746658595249 · Twitter Post
• https://ibm.com/support/pages/node/7239003 · Vendor Advisory, Patch
• https://twitter.com/DavidMarquet19/status/1952329675138580874 · Twitter Post
• https://t.me/cveNotify/132296 · Telegram Post
• https://twitter.com/CVEnew/status/1942264850568102090 · Twitter Post