CVE-2025-36222CWE-1188

CVE-2025-36222

High · published September 12, 2025

CVSS v3.1
8.7
EPSS
0%
Percentile
31.6
In the wild
Unconfirmed
What it is

IBM Fusion 2.2.0 through 2.10.1, IBM Fusion HCI 2.2.0 through 2.10.0, and IBM Fusion HCI for watsonx 2.8.2 through 2.10.0 uses insecure default configurations that could expose AMQStreams without client authentication that could allow an attacker to perform unauthorized actions.

The record
Technical detail
CVSS v3.1
8.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00387 · 31.6th percentile
Weakness
CWE-1188 · Initialization of a Resource with an Insecure Default
Published
2025-09-12T01:15Z
Affected products (3)
ProductVersionsFixed in
ibm/storage_fusion≥ 2.2.0, < 2.11.02.11.0
ibm/storage_fusion_hci≥ 2.2.0, < 2.11.02.11.0
ibm/storage_fusion_hci_for_watsonx≥ 2.8.2, < 2.11.02.11.0
References (1)
https://www.ibm.com/support/pages/node/7244646 · [email protected]
EPSS history
Timeline
  • 11 SEP 20:44Z
    IBM Fusion insecure default configuration
    cvelistv5