CVE-2025-1823

Published: Feb 4, 2026Modified: Jun 17, 2026

3.5

Vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Exploitability: 2.1 / Impact: 1.4

Source: NVD

Description

IBM Jazz Reporting Service could allow an authenticated user on the host network to cause a denial of service using specially crafted SQL query that consumes excess memory resources.

Affected (28)

Products: Ibm: Jazz Reporting Service

Ibm

1 product

Jazz Reporting Service

Configuration A

28 vulnerable

Vulnerable Software	Affected Versions
Ibm Jazz Reporting Service	Version 7.0.3
Ibm Jazz Reporting Service	Version 7.0.3 ifix001
Ibm Jazz Reporting Service	Version 7.0.3 ifix002
Ibm Jazz Reporting Service	Version 7.0.3 ifix003
Ibm Jazz Reporting Service	Version 7.0.3 ifix004
Ibm Jazz Reporting Service	Version 7.0.3 ifix005
Ibm Jazz Reporting Service	Version 7.0.3 ifix006
Ibm Jazz Reporting Service	Version 7.0.3 ifix007
Ibm Jazz Reporting Service	Version 7.0.3 ifix008
Ibm Jazz Reporting Service	Version 7.0.3 ifix009
Ibm Jazz Reporting Service	Version 7.0.3 ifix010
Ibm Jazz Reporting Service	Version 7.0.3 ifix011
Ibm Jazz Reporting Service	Version 7.0.3 ifix012
Ibm Jazz Reporting Service	Version 7.0.3 ifix013
Ibm Jazz Reporting Service	Version 7.0.3 ifix014
Ibm Jazz Reporting Service	Version 7.0.3 ifix015
Ibm Jazz Reporting Service	Version 7.0.3 ifix016
Ibm Jazz Reporting Service	Version 7.0.3 ifix017
Ibm Jazz Reporting Service	Version 7.0.3 ifix018
Ibm Jazz Reporting Service	Version 7.0.3 ifix019
Ibm Jazz Reporting Service	Version 7.0.3 ifix020
Ibm Jazz Reporting Service	Version 7.1
Ibm Jazz Reporting Service	Version 7.1 ifix001
Ibm Jazz Reporting Service	Version 7.1 ifix002
Ibm Jazz Reporting Service	Version 7.1 ifix003
Ibm Jazz Reporting Service	Version 7.1 ifix004-sr1-base
Ibm Jazz Reporting Service	Version 7.1 ifix005
Ibm Jazz Reporting Service	Version 7.1 ifix006

Related CWEs

CWE-770

Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

References (1)

https://www.ibm.com/support/pages/node/7258083

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.