← Back

CVE-2025-0154

nvd nist
Published: Apr 2, 2025Modified: Jul 15, 2025

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

IBM TXSeries for Multiplatforms 9.1 and 11.1 could disclose sensitive information to a remote attacker due to improper neutralization of HTTP headers.

Affected (2)

Ibm
1 product
Txseries For Multiplatforms
Configuration A
2 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Ibm
Txseries For Multiplatforms
Version 11.1
Txseries For Multiplatforms
Version 9.1
Running on/withPlatform Versions
Ibm
Aix
All versions
Linux
Linux Kernel
All versions

Related CWEs

CWE-644
Improper Neutralization of HTTP Headers for Scripting Syntax
The product does not neutralize or incorrectly neutralizes web scripting syntax in HTTP headers that can be used by web browser components that can process raw headers, such as Flash.

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.