Remote Code Execution Vulnerability in IBM Tivoli Monitoring
CVE-2025-3357

9.8CRITICAL

Key Information:

Vendor

IBM
Status
Tivoli Monitoring
Vendor
CVE Published:
28 May 2025

What is CVE-2025-3357?

A vulnerability exists in IBM Tivoli Monitoring versions 6.3.0.7 through 6.3.0.7 Service Pack 19, where improper validation of an index value in a dynamically allocated array could allow a remote attacker to execute arbitrary code. This could lead to significant security risks, requiring immediate remediation efforts to safeguard against unauthorized access.

Affected Version(s)

Tivoli Monitoring 6.3.0.7 <= 6.3.0.7 SP15

References

https://www.ibm.com/support/pages/node/7234923
vendor-advisorypatch

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Aleksandr Tlyapov
JSON
.
CVE-2025-3357 : Remote Code Execution Vulnerability in IBM Tivoli Monitoring