PT-2025-39855 · Ibm · Ibm Websphere Application Server

Published 2025-09-29 · Updated 2025-10-02 · CVE-2025-36099

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 8.5 through 9.0

Description IBM WebSphere Application Server is susceptible to a denial of service condition. Sending a crafted request can lead to excessive memory consumption, potentially impacting server availability. A user with sufficient privileges could trigger this issue.

Recommendations Apply updates to address the issue in IBM WebSphere Application Server versions 8.5 through 9.0.

Fix

DoS

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

BDU:2025-16246

CVE-2025-36099

Affected Products

Ibm Websphere Application Server

References · 8

• https://osv.dev/vulnerability/CVE-2025-36099 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-36099 · Security Note
• https://bdu.fstec.ru/vul/2025-16246 · Security Note
• https://ibm.com/support/pages/node/7246549 · Patch, Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1972790085708898641 · Twitter Post
• https://twitter.com/knaepp/status/1973800153241841790 · Twitter Post
• https://t.me/CVEtracker/33643 · Telegram Post
• https://twitter.com/knaepp/status/1972679013425443303 · Twitter Post