Remote Privilege Escalation in ibi WebFOCUS by TIBCO
CVE-2025-11548

9.3CRITICAL

Key Information:

Vendor: Ibi
Status: Webfocus
Vendor: CVE Published:; 14 October 2025

What is CVE-2025-11548?

A vulnerability in ibi WebFOCUS allows attackers to remotely escalate privileges without authentication, obtaining administrative access to the application. This unauthorized access can lead to malicious actions within the application, including the potential for remote code execution, posing a significant threat to system integrity and user data security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

WebFOCUS 9.1 <= 3

WebFOCUS 9.2 <= 2

References

https://community.tibco.com/advisories/ibi-security-advis...

CVSS V4

Score:

9.3

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Attack Required:

None

Privileges Required:

Undefined

User Interaction: