What is CVE-2025-25048?

CVE-2025-25048 is a medium-severity vulnerability in Ibm Jazz Foundation, classified under Relative Path Traversal. CVSS score: 6.5/10. Published 2025-09-04.

How severe is CVE-2025-25048?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Path Traversal in Ibm Jazz Foundation

CVE-2025-25048

IBM Jazz Foundation 7.0.2 through 7.0.2 iFix033, 7.0.3 through 7.0.3 iFix012, and 7.1.0 through 7.1.0 iFix002 could allow an authenticated user to upload files to the system due to improper neutralization of sequences that can resolve to a…

EPSS: 0.003 (22.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N.

Affected products

Ibm Jazz Foundation — versions 7.0.2, 7.0.3, 7.1.0
Ibm Jazz_foundation — versions 7.0.2, 7.0.3, 7.1.0

Weakness classification (CWE)

CWE-23 — Relative Path Traversal

References

psirt@us.ibm.com (vendor-advisory, Patch, patch, Vendor Advisory)

Frequently asked questions

What is CVE-2025-25048?: CVE-2025-25048 is a medium-severity vulnerability in Ibm Jazz Foundation, classified under Relative Path Traversal. CVSS score: 6.5/10. Published 2025-09-04.
How severe is CVE-2025-25048?: Medium severity. CVSS v3 base score is 6.5 out of 10.