CVE-2025-25048: falha de média gravidade em IBM Jazz Foundation
IBM Jazz Foundation path traversal
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.5epss 0.3%
IBM Jazz Foundation 7.0.2 through 7.0.2 iFix033, 7.0.3 through 7.0.3 iFix012, and 7.1.0 through 7.1.0 iFix002 could allow an authenticated user to upload files to the system due to improper neutralization of sequences that can resolve to a restricted directory.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Produtos afetados
IBM · Jazz FoundationCVEs relacionadas — IBM Jazz Foundation
No mesmo produto, das mais perigosas para as menos.
CVE-2023-26280MEDIUMIBM Jazz Foundation improper access controlEPSS 0.4%CVE-2024-5591MEDIUMIBM Jazz Foundation information disclosureEPSS 0.4%CVE-2023-45181MEDIUMIBM Jazz Foundation cross-site scriptingEPSS 0.3%CVE-2021-29669MEDIUMIBM Jazz Foundation cross-site scriptingEPSS 0.2%CVE-2024-43184MEDIUMIBM Jazz Foundation cross-site scriptingEPSS 0.2%CVE-2025-15395MEDIUMIBM Jazz Foundation access control violationEPSS 0.2%