CVE-2025-2134

Published: Feb 4, 2026Modified: Jun 17, 2026

3.5

Vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Exploitability: 2.1 / Impact: 1.4

Source: psirt@us.ibm.com (Secondary)

Description

IBM Jazz Reporting Service could allow an authenticated user on the network to affect the system's performance using complicated queries due to insufficient resource pooling.

Affected (28)

Products: Ibm: Jazz Reporting Service

Ibm

1 product

Jazz Reporting Service

Configuration A

28 vulnerable

Vulnerable Software	Affected Versions
Ibm Jazz Reporting Service	Version 7.0.3
Ibm Jazz Reporting Service	Version 7.0.3 ifix001
Ibm Jazz Reporting Service	Version 7.0.3 ifix002
Ibm Jazz Reporting Service	Version 7.0.3 ifix003
Ibm Jazz Reporting Service	Version 7.0.3 ifix004
Ibm Jazz Reporting Service	Version 7.0.3 ifix005
Ibm Jazz Reporting Service	Version 7.0.3 ifix006
Ibm Jazz Reporting Service	Version 7.0.3 ifix007
Ibm Jazz Reporting Service	Version 7.0.3 ifix008
Ibm Jazz Reporting Service	Version 7.0.3 ifix009
Ibm Jazz Reporting Service	Version 7.0.3 ifix010
Ibm Jazz Reporting Service	Version 7.0.3 ifix011
Ibm Jazz Reporting Service	Version 7.0.3 ifix012
Ibm Jazz Reporting Service	Version 7.0.3 ifix013
Ibm Jazz Reporting Service	Version 7.0.3 ifix014
Ibm Jazz Reporting Service	Version 7.0.3 ifix015
Ibm Jazz Reporting Service	Version 7.0.3 ifix016
Ibm Jazz Reporting Service	Version 7.0.3 ifix017
Ibm Jazz Reporting Service	Version 7.0.3 ifix018
Ibm Jazz Reporting Service	Version 7.0.3 ifix019
Ibm Jazz Reporting Service	Version 7.0.3 ifix020
Ibm Jazz Reporting Service	Version 7.1
Ibm Jazz Reporting Service	Version 7.1 ifix001
Ibm Jazz Reporting Service	Version 7.1 ifix002
Ibm Jazz Reporting Service	Version 7.1 ifix003
Ibm Jazz Reporting Service	Version 7.1 ifix004-sr1-base
Ibm Jazz Reporting Service	Version 7.1 ifix005
Ibm Jazz Reporting Service	Version 7.1 ifix006

Related CWEs

CWE-410

Insufficient Resource Pool

The product's resource pool is not large enough to handle peak demand, which allows an attacker to prevent others from accessing the resource by using a (relatively) large number of requests for resources.

References (1)

https://www.ibm.com/support/pages/node/7258083

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.