CVE-2025-36222highCWE-1188

CVE-2025-36222: high-severity vulnerability in IBM Fusion

IBM Fusion insecure default configuration

Published · Updated

Follow this CVE+ Monitor Fusion+ Monitor Fusion HCI

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.7epss 0.4%
IBM Fusion 2.2.0 through 2.10.1, IBM Fusion HCI 2.2.0 through 2.10.0, and IBM Fusion HCI for watsonx 2.8.2 through 2.10.0 uses insecure default configurations that could expose AMQStreams without client authentication that could allow an attacker to perform unauthorized actions.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Affected products
IBM · FusionIBM · Fusion HCIIBM · Fusion HCI for watsonx
Related CVEs — IBM Fusion

In the same product, most dangerous first.

CVE-2024-22315MEDIUMIBM Fusion improper communication restrictionEPSS 0.2%