PT-2025-21227 · Ibm · Ibm Semeru Runtime

🗓️ 14 May 2025 00:00:00Reported by Positive TechnologiesType

ptsecurity

ptsecurity🔗 dbugs.ptsecurity.com👁 1 Views

Denial of service in IBM Semeru Runtime due to buffer overflow. Update to fix AES/CBC encryption.

Reporter	Title	Published	Views	Family All 44
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Semeru Runtime affect z/Transaction Processing Facility	11 Aug 202514:09	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in IBM Semeru SDK (CVE-2025-21587, CVE-2025-30698, CVE-2025-2900) affect Power HMC.	7 Jul 202505:42	–	ibm
IBM Security Bulletins	Security Bulletin: Enterprise Content Managemant System Monitor for July 2025 - multiple CVEs	26 Jan 202610:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct File Agent is vulnerable to multiple issues due to IBM Semeru Runtime	2 Jul 202517:14	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities affect IBM Tivoli Netcool Impact	24 Oct 202517:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct Web Service is affected by multiple vulnerabilities due to IBM Java	11 Jul 202507:07	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Semeru Runtime may affect IBM Decision Optimization for IBM Cloud Pak for Data (CVE-2025-21587, CVE-2025-30698, CVE-2025-2900 and CVE-2025-4447)	1 Sep 202510:14	–	ibm
IBM Security Bulletins	Security Bulletin: OpenPages is vulnerable to IBM Semeru Runtime Quarterly CPU - Apr 2025 - Includes OpenJDK April 2025 CPU plus two additional CVEs	15 Sep 202515:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SPSS Statistics Java SE Vulnerability Updates	5 May 202621:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct for Unix is vulnerable to various attacks due to IBM Runtime Environment Java Technology Edition Version 17	14 Jul 202515:23	–	ibm

Source	Link
ibm	www.ibm.com/support/pages/node/7233415
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-2900
twitter	www.twitter.com/CVEnew/status/1922765597034807457
t	www.t.me/cveNotify/132829
t	www.t.me/cvetracker/23852
twitter	www.twitter.com/VulmonFeeds/status/1922817971971314097
twitter	www.twitter.com/Carlos_LopezMkt/status/1924423787174310387
twitter	www.twitter.com/cracbot/status/1924419874463383889
t	www.t.me/latest_high_impact_cve/2368

19 Aug 2025 00:00Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.5

EPSS0.00151

SSVC

ibm semeru runtime vulnerability denial of service buffer overflow aes/cbc encryption software update.