CVE-2025-33142 MEDIUM

CVE-2025-33142: IBM WebSphere Application Server information disclosure

Vendor Ibm
Product WebSphere Application Server
Weakness CWE-295
Published August 14, 2025
Last update August 14, 2025
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction Required
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security for TLS connections.

Key dates

02Disclosure timeline

August 14, 2025 CVE published
August 14, 2025 Record updated