PT-2025-41971 · Ibi · Ibi Webfocus

Published 2025-10-14 · Updated 2025-10-16 · CVE-2025-11548

Positive Technologies (AI Summary)

CVSS v4.0

9.3

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions ibi WebFOCUS (affected versions not specified)

Description A remotely exploitable issue in ibi WebFOCUS allows an attacker to escalate privileges to an administrative level without authentication. Successful exploitation may lead to unauthenticated Remote Code Execution. The issue requires only network access to gain administrative privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2025-11548

Affected Products

Ibi Webfocus

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-11548 · Security Note
• https://twitter.com/0dayPublishing/status/1978142306306756814 · Twitter Post
• https://t.me/cveNotify/138590 · Telegram Post
• https://community.tibco.com/advisories/ibi-security-advisory-october-14-2025-ibi-webfocus-cve-2025-11548-r222 · Note
• https://twitter.com/CVEnew/status/1978932590892716206 · Twitter Post