CVE-2025-3354CWE-122
IBM Tivoli Monitoring code execution
High · published August 6, 2025
What it is
IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 20 is vulnerable to a heap-based buffer overflow, caused by improper bounds checking. A remote attacker could overflow a buffer and execute arbitrary code on the system or cause the server to crash.
The record
Technical detail
- CVSS v3.1
- 8.1 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00503 · 42.1th percentile
- Weakness
- CWE-122 · Heap-based Buffer Overflow
- Published
- 2025-08-06T13:50Z
EPSS history
Timeline