CVE-2025-2529CWE-228

CVE-2025-2529

Low · published October 15, 2025

CVSS v3.1
2.9
EPSS
0%
Percentile
10.4
In the wild
Unconfirmed
What it is

Applications using affected versions of Ehcache 3.x can experience degraded cache-write performance if the application using Ehcache utilizes keys sourced from (malicious) external parties in an unfiltered/unsalted way.

The record
Technical detail
CVSS v3.1
2.9 · LOW
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00208 · 10.4th percentile
Weakness
CWE-228 · Improper Handling of Syntactically Invalid Structure
Published
2025-10-15T20:15Z
Affected products (2)
ProductVersionsFixed in
ibm/terracotta≥ 10.15.0, < 10.15.0.2310.15.0.23
ibm/terracotta≥ 11.1.0, < 11.1.0.511.1.0.5
References (1)
https://www.ibm.com/support/pages/node/7247977 · [email protected]
EPSS history
Timeline
  • 15 OCT 15:29Z
    IBM Terracotta denial of service
    cvelistv5