CVE-2025-11548CWE-94code-injection

CVE-2025-11548

published October 14, 2025

CVSS
9.3
EPSS
1%
Percentile
43.5
In the wild
Unconfirmed
What it is

A remote, unauthenticated privilege escalation in ibi WebFOCUS allows an attacker to gain administrative access to the application which may lead to unauthenticated Remote Code Execution

The record
Technical detail
CVSS
9.3 · NONE
CVSS v4.0
Not supplied
EPSS
0.00523 · 43.5th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2025-10-14T21:15Z
References (1)
https://community.tibco.com/advisories/ibi-security-advisory-october-14-2025-ibi-webfocus-cve-2025-11548-r222/ · [email protected]
EPSS history
Timeline
  • 14 OCT 16:45Z
    ibi WebFOCUS - Unauthenticated RCE Vulnerability
    cvelistv5