PT-2025-47651 · Microsoft · Ibm Application Gateway

Published 2025-11-20 · Updated 2025-12-24 · CVE-2025-64656

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Application Gateway versions 9.4 through 9.8

Description An out-of-bounds read issue exists in Application Gateway, potentially allowing an unauthorized attacker to elevate privileges over a network. The issue enables an attacker to escalate privileges with minimal complexity.

Recommendations Application Gateway versions 9.4 through 9.8 should be updated. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2025-64656

Affected Products

Ibm Application Gateway

References · 12

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-64656 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-64656 · Security Note
• https://t.me/cveNotify/144038 · Telegram Post
• https://t.me/cveNotify/145137 · Telegram Post
• https://twitter.com/cracbot/status/1995447833366016046 · Twitter Post
• https://twitter.com/SecReportCVE/status/2003861594472579572 · Twitter Post
• https://t.me/netlas/513 · Telegram Post
• https://t.me/msrcreports/2285 · Telegram Post
• https://twitter.com/Netlas_io/status/1993651033017381197 · Twitter Post
• https://twitter.com/0dayPublishing/status/1993725207077392831 · Twitter Post
• https://twitter.com/CVEnew/status/1993513532147585325 · Twitter Post
• https://twitter.com/CveFindCom/status/1993495106683314281 · Twitter Post