Improper Authorization Third-Party Dependency in Confluence Data Center and Server - CVE-2025-41248

🗓️ 14 Nov 2025 05:27:41Reported by security-metrics-botType

High severity vulnerability in Confluence Data Center and Server; upgrade beyond 10.1.0 to 10.1.1.

Reporter	Title	Published	Views	Family All 75
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager for December 2025 - Multiple CVEs addressed	29 Jan 202607:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct Web Services is affected by a vulnerability in spring-security-core-6.4.3.jar (CVE-2025-41248)	7 Oct 202507:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to Improper Authorization in Spring Framework [CVE-2025-41249]	17 Dec 202514:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by vulnerabilities in spring-security-core (CVE-2025-41248)	10 Mar 202610:14	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 2.1.0	5 Dec 202509:12	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Observability with Instana (OnPrem)	9 Dec 202515:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability has addressed Multiple Vulnerabilities within Instana Agent container image	3 Mar 202613:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities	31 Oct 202519:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM OpenPages fixes multiple Spring vulnerabilities	18 Nov 202518:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in Spring (CVE-2025-41249)	31 Oct 202520:04	–	ibm

Vulners

Node

atlassian confluence_data_centerMatch10.1.0

atlassian confluence_data_centerMatch10.1.1

19 Feb 2026 14:29Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.17.5

EPSS0.0009

SSVC