CVE-2025-11548 — ibi WebFOCUS - Unauthenticated RCE Vulnerability

CVE-2025-11548

ibi WebFOCUS - Unauthenticated RCE Vulnerability PUBLISHED

Description (CNA)

A remote, unauthenticated privilege escalation in ibi WebFOCUS allows an attacker to gain administrative access to the application which may lead to unauthenticated Remote Code Execution

Affected (CNA)

Vendor / product	Versions
ibi / WebFOCUS	affected 9.1 through 3; affected 9.2 through 2

CWE

CWE-94

References

https://community.tibco.com/advisories/ibi-security-advisory-october-14-2025-ibi-webfocus-cve-2025-11548-r222/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.