IBM Semeru Runtime vulnerabilities

2 CVEs affecting IBM Semeru Runtime, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-2900, published 2025-05-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-22361, published 2024-02-10. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Semeru Runtime 8.0.302.0 through 8.0.392.0, 11.0.12.0 through 11.0.21.0, 17.0.1.0 - 17.0.9.0, and 21.0.1.0 uses weaker than expected cryptographic algorithms that could allow an attacker to…
CVE-2025-2900, published 2025-05-14. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Semeru Runtime 8.0.302.0 through 8.0.442.0, 11.0.12.0 through 11.0.26.0, 17.0.0.0 through 17.0.14.0, and 21.0.0.0 through 12.0.6.0 is vulnerable to a denial of service caused by a buffer overflow…