Sign In

CVE-2025-36099

📊 4.9 MEDIUM⚡ 0.1%🎯 0 exploits
📅 Published Sep 29, 2025
📋 Status: Analyzed

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to a denial of service, caused by sending a specially-crafted request. A privileged user could exploit this vulnerability to cause the server to consume memory resources.

🎯 Affected Products & Systems

2 product configurations affected

Filter by type:
📱
Vulnerable
Version: 8.5.0.0
CPE:
cpe:2.3:a:ibm:websphere_application_server:8.5.0.0:*:*:*:*:*:*:*
📱
Vulnerable
Version: 9.0.0.0
CPE:
cpe:2.3:a:ibm:websphere_application_server:9.0.0.0:*:*:*:*:*:*:*
Metrics
4.9 MEDIUMCVSS v3.1[email protected]
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Attack Vector:
NETWORK
Complexity:
LOW
Privileges:
HIGH
User Interaction:
NONE
Confidentiality:
NONE
Integrity:
NONE
Availability:
HIGH
Scope:
UNCHANGED

🔍 Technical Details

Analysis Status
Analyzed
CVSS Details
4.9 (MEDIUM)v3.1
Source: [email protected]
EPSS Details
0.1% (Minimal)16.9th percentile
Last updated: Nov 1, 2025
Exploitation probability within 30 days
Published Date
Sep 29, 2025 (1 month ago)
Last Modified
Oct 3, 2025 (1 month ago)
Security Weaknesses1
References2