CVE-2025-36047

🗓️ 14 Aug 2025 16:15:32Reported by [email protected]Type

CVE-2025-36047: WebSphere Liberty 18.0.0.2–25.0.0.8 DoS via crafted request; remote attacker exhausts memory.

Reporter	Title	Published	Views	Family All 47
IBM Security Bulletins	Security Bulletin: Vulnerability in IBM WebSphere Application (CVE-2025-36047) affects IBM PowerVM Novalink.	21 Oct 202518:02	–	ibm
IBM Security Bulletins	Security Bulletin: WebSphere Application Server Liberty is affected by a denial of service with HTTP/2 ( CVE-2025-36047)	10 Nov 202509:12	–	ibm
IBM Security Bulletins	Security Bulletin:IBM WebSphere Application Server Liberty shipped with IBM OpenPages is vulnerable to multiple vulnerabilities	7 Oct 202519:58	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images	14 Nov 202514:06	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities may affect IBM WebSphere Liberty that is shipped with IBM CICS TX Advanced.	13 Oct 202512:15	–	ibm
IBM Security Bulletins	Security Bulletin: The IBM® Engineering Lifecycle Management products using WebSphere Application Server Liberty is affected by a denial of service with HTTP/2 (CVE-2025-36047)	4 Sep 202509:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Controller	4 Dec 202514:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Symphony with IBM WebSphere Application Server Liberty is vulnerable to a denial of service	7 Jan 202619:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in WebSphere Application Server Liberty affects IBM Enterprise Application Service for Java	17 Sep 202519:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses multiple third party libraries which is vulnerable to multiple CVEs	3 Nov 202508:54	–	ibm