CVE-2025-36047

🗓️ 14 Aug 2025 15:38:11Reported by ibmType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 34 Views

WebSphere Liberty 18.0.0.2–25.0.0.8 DoS via crafted request; remote attacker may exhaust memory.

Reporter	Title	Published	Views	Family All 47
IBM Security Bulletins	Security Bulletin: Vulnerability in IBM WebSphere Application (CVE-2025-36047) affects IBM PowerVM Novalink.	21 Oct 202518:02	–	ibm
IBM Security Bulletins	Security Bulletin: WebSphere Application Server Liberty is affected by a denial of service with HTTP/2 ( CVE-2025-36047)	10 Nov 202509:12	–	ibm
IBM Security Bulletins	Security Bulletin:IBM WebSphere Application Server Liberty shipped with IBM OpenPages is vulnerable to multiple vulnerabilities	7 Oct 202519:58	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images	14 Nov 202514:06	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities may affect IBM WebSphere Liberty that is shipped with IBM CICS TX Advanced.	13 Oct 202512:15	–	ibm
IBM Security Bulletins	Security Bulletin: The IBM® Engineering Lifecycle Management products using WebSphere Application Server Liberty is affected by a denial of service with HTTP/2 (CVE-2025-36047)	4 Sep 202509:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Controller	4 Dec 202514:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Symphony with IBM WebSphere Application Server Liberty is vulnerable to a denial of service	7 Jan 202619:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in WebSphere Application Server Liberty affects IBM Enterprise Application Service for Java	17 Sep 202519:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses multiple third party libraries which is vulnerable to multiple CVEs	3 Nov 202508:54	–	ibm

NVD

Vulners

Node

ibm websphere_application_serverRange18.0.0.2–25.0.0.9liberty

AND

apple macosMatch-

ibm aixMatch-

ibm iMatch-

ibm z/osMatch-

linux linux_kernelMatch-

microsoft windowsMatch-

[
  {
    "cpes": [
      "cpe:2.3:a:ibm:websphere_application_server:18.0.0.2:*:*:*:liberty:*:*:*",
      "cpe:2.3:a:ibm:websphere_application_server:25.0.0.8:*:*:*:liberty:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "product": "WebSphere Application Server Liberty",
    "vendor": "IBM",
    "versions": [
      {
        "lessThanOrEqual": "25.0.0.8",
        "status": "affected",
        "version": "18.0.0.2",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/pages/node/7242086
kb	www.kb.cert.org/vuls/id/767506

03 Nov 2025 20:18Current

7High risk

Vulners AI Score7

CVSS 3.15.3 - 7.5

EPSS0.00115

SSVC

CWE-770