Weak Security Configuration in IBM WebSphere Application Server
CVE-2025-13333

4.4MEDIUM

Key Information:

Vendor

IBM
Status
Websphere Application Server
Vendor
CVE Published:
17 February 2026

What is CVE-2025-13333?

IBM WebSphere Application Server 9.0 and 8.5 may exhibit inadequate security measures during the system administration of security settings, potentially exposing sensitive configurations and allowing unauthorized access. It is crucial for users of these versions to review their security settings and apply necessary updates to enhance protection against potential threats.

Affected Version(s)

WebSphere Application Server 9.0 <= 9.0.5.27

WebSphere Application Server 8.5 <= 8.5.5.29

References

https://www.ibm.com/support/pages/node/7260217
vendor-advisorypatch

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.