PT-2025-29871 · Ibm · Ibm Websphere Application Server Liberty+1

Published 2025-07-16 · Updated 2025-08-11 · CVE-2025-36097

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 9.0 IBM WebSphere Application Server Liberty versions 17.0.0.3 through 25.0.0.7

Description IBM WebSphere Application Server and WebSphere Application Server Liberty are susceptible to a denial of service condition. This issue is due to a stack-based overflow triggered by a specially crafted request, leading to excessive memory consumption.

Recommendations IBM WebSphere Application Server version 9.0: At the moment, there is no information about a newer version that contains a fix for this vulnerability. IBM WebSphere Application Server Liberty versions 17.0.0.3 through 25.0.0.7: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2025-36097

Affected Products

Ibm Websphere Application Server

Ibm Websphere Application Server Liberty

References · 11

• https://osv.dev/vulnerability/CVE-2025-36097 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-36097 · Security Note
• https://ibm.com/support/pages/node/7239856 · Vendor Advisory, Patch
• https://t.me/cvetracker/27994 · Telegram Post
• https://twitter.com/knaepp/status/1945676090334130178 · Twitter Post
• https://twitter.com/knaepp/status/1945522574382837923 · Twitter Post
• https://twitter.com/knaepp/status/1945523842392162800 · Twitter Post
• https://t.me/cveNotify/131725 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1945712169233887494 · Twitter Post
• https://twitter.com/knaepp/status/1945518803074396479 · Twitter Post
• https://twitter.com/CVEnew/status/1945562934416986607 · Twitter Post