CVE-2025-36124

🗓️ 12 Aug 2025 18:45:24Reported by ibmType

CVE-2025-36124 WebSphere Liberty 17.0.0.3-25.0.0.8 lets attacker bypass security via JMS config.

Reporter	Title	Published	Views	Family All 37
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Predict Component uses IBM WebSphere Application Server Liberty 25.0.0.8 which is vulnerable to CVE-2025-36000, CVE-2020-36732 and CVE-2025-36124	5 Jan 202609:37	–	ibm
IBM Security Bulletins	Security Bulletin:IBM WebSphere Application Server Liberty shipped with IBM OpenPages is vulnerable to multiple vulnerabilities	7 Oct 202519:58	–	ibm
IBM Security Bulletins	Security Bulletin: WebSphere Application Server Liberty is affected by a security bypass in JMS messaging ( CVE-2025-36124)	10 Nov 202509:22	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities may affect IBM WebSphere Liberty that is shipped with IBM CICS TX Advanced.	13 Oct 202512:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Symphony with IBM WebSphere Application Server Liberty is vulnerable to a denial of service	7 Jan 202619:36	–	ibm
IBM Security Bulletins	Security Bulletin: JMS messaging configuration vulnerability in WebSphere Application Server Liberty affects IBM Spectrum Protect Operations Center (CVE-2025-36124)	5 Dec 202513:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in WebSphere Application Server Liberty affects IBM Enterprise Application Service for Java	17 Sep 202519:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty is affected by a security bypass vulnerability (CVE-2025-36124)	25 Aug 202521:05	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities may affect IBM WebSphere Liberty that is shipped with TXSeries for Multiplatforms.	13 Oct 202512:07	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities are addressed with IBM Business Automation Workflow containers 24.0.0-IF007, 24.0.1-IF005, and 25.0.0-IF002	6 Nov 202509:44	–	ibm

NVD

Vulners

Node

ibm websphere_application_serverRange17.0.0.3–25.0.0.9liberty

[
  {
    "cpes": [
      "cpe:2.3:a:ibm:websphere_application_server:17.0.0.3:*:*:*:liberty:*:*:*",
      "cpe:2.3:a:ibm:websphere_application_server:25.0.0.7:*:*:*:liberty:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "product": "WebSphere Application Server Liberty",
    "vendor": "IBM",
    "versions": [
      {
        "lessThanOrEqual": "25.0.0.8",
        "status": "affected",
        "version": "17.0.0.3",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/pages/node/7242027

14 Aug 2025 01:23Current

7.1High risk

Vulners AI Score7.1

CVSS 3.15.9 - 7.5

EPSS0.00051

SSVC

CWE-268