What is CVE-2025-36137?

CVE-2025-36137 is a high-severity vulnerability in Ibm Sterling_connect\, classified under CWE-250. CVSS score: 7.2/10. Published 2025-10-30.

How severe is CVE-2025-36137?

High severity. CVSS v3 base score is 7.2 out of 10.

Vulnerability in Ibm Sterling_connect\

CVE-2025-36137

IBM Sterling Connect Direct for Unix 6.2.0.7 through 6.2.0.9 iFix004, 6.4.0.0 through 6.4.0.2 iFix001, and 6.3.0.2 through 6.3.0.5 iFix002 incorrectly assigns permissions for maintenance tasks to Control Center Director (CCD) users that co…

EPSS: 0.003 (24.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Ibm Sterling_connect\ — versions direct
Ibm Sterling Connect:direct For Unix — versions 6.2.0.7, 6.4.0.0, 6.3.0.2

Weakness classification (CWE)

CWE-250

References

psirt@us.ibm.com (vendor-advisory, patch, Vendor Advisory)

Frequently asked questions

What is CVE-2025-36137?: CVE-2025-36137 is a high-severity vulnerability in Ibm Sterling_connect\, classified under CWE-250. CVSS score: 7.2/10. Published 2025-10-30.
How severe is CVE-2025-36137?: High severity. CVSS v3 base score is 7.2 out of 10.