EUVD-2023-0457

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

ReDoS vulnerability found in ua-parser-js version impacts security measures and usage.

Reporter	Title	Published	Views	Family All 45
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in Node.js ua-parser-js	2 May 202321:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to a denial of service due to the ua-parser-js module (CVE-2022-25927)	20 Apr 202312:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar User Behavior Analytics is vulnerable to components with known vulnerabilities	30 Mar 202316:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Streams is affected by vulnerabilities in Node.js (CVE-2022-25927 and CVE-2022-25881)	4 Apr 202307:40	–	ibm
IBM Security Bulletins	Security Bulletin: There is a security vulnerability in Node.js ua-parser-js module used by IBM Maximo for Civil Infrastructure in Maximo Application Suite (CVE-2022-25927)	29 Mar 202309:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Discover is vulnerable to multiple vulnerabilities	20 Jun 202304:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Assistant App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	1 Feb 202419:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities	7 Mar 202309:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands may be vulnerable to denial of service due to [CVE-2022-25927]	3 Mar 202315:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities that affect IBM Db2 Intelligence Center (CVE-2025-47913, CVE-2022-25927, CVE-2025-6493, CWE-400, CWE-1333, CVE-2025-14687	17 Dec 202517:15	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "65766023-714f-3af8-ae78-120c539cd69c",
        "vendor": {
          "name": "n/a"
        }
      }
    ]
  }
]

Source	Link
github	www.github.com/faisalman/ua-parser-js/security/advisories/GHSA-fhg7-m89q-25r3
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-25927
github	www.github.com/faisalman/ua-parser-js/commit/a6140a17dd0300a35cfc9cff999545f267889411
github	www.github.com/faisalman/ua-parser-js
security	www.security.snyk.io/vuln/SNYK-JS-UAPARSERJS-3244450

03 Oct 2025 20:07Current

7.8High risk

Vulners AI Score7.8

CVSS 3.15.3 - 7.5

EPSS0.01453

SSVC