CVE-2025-3356: IBM Tivoli Monitoring

Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days.

IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 21 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view, overwrite, or append to arbitrary files on the system.

Affected products

• IBM Tivoli Monitoring: version 6.3.0.7 only

Published 2025-10-30. Last modified 2026-10-07.