CVE-2025-7389 Unauthorized Arbitrary File Read via RMI in AdminServer Interface

A vulnerability in the AdminServer component of OpenEdge on all supported platforms grants its authenticated users OS-level access to the server through the adopted authority of the AdminServer process itself. The delegated authority of the AdminServer could allow its users the ability to read...

CVE-2025-58457

Apache ZooKeeper (versions 3.9.0 before 3.9.4) contains an improper permission check in the AdminServer, allowing authorized clients to execute snapshot and restore commands with insufficient privileges (CWE-280). This vulnerability impacts several products, including IBM Sterling B2B Integrator ...