CVE-2025-3218: IBM I

Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days.

IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 is vulnerable to authentication and authorization attacks due to incorrect validation processing in IBM i Netserver. A malicious actor could use the weaknesses, in conjunction with brute force authentication attacks or to bypass authority restrictions, to access the server.

Affected products

• IBM I: version 7.2 only; version 7.3 only; version 7.4 only; version 7.5 only; version 7.6 only

Published 2025-05-07. Last modified 2026-06-17.