← CVE Intelligence

CVE-2025-36097

IBM WebSphere Application Server denial of service PUBLISHED

Description (CNA)

IBM WebSphere Application Server 9.0 and WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.7 are vulnerable to a denial of service, caused by a stack-based overflow. An attacker can send a specially crafted request that cause the server to consume excessive memory resources.

Affected (CNA)

Vendor / productVersions
IBM / WebSphere Application Serveraffected 9.0
IBM / WebSphere Application Server Libertyaffected 17.0.0.3 through 25.0.0.7

CWE

CWE-121

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.