CVE-2025-36157: IBM Jazz Foundation

Critical severity, CVSS 9.1. EPSS: 0.6% chance of exploitation in the next 30 days.

IBM Jazz Foundation 7.0.2 to 7.0.2 iFix035, 7.0.3 to 7.0.3 iFix018, and 7.1.0 to 7.1.0 iFix004 could allow an unauthenticated remote attacker to update server property files that would allow them to perform unauthorized actions.

Affected products

• IBM Jazz Foundation: version 7.0.2 only; version 7.0.3 only; version 7.1.0 only

Published 2025-08-24. Last modified 2026-06-17.