CVE-2025-33142

published 2025-08-14

CVE-2025-33142: IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security for TLS connections.

high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C H I N A N

IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security for TLS connections.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
ibm	websphere_application_server	—	—
ibm	websphere_application_server	—	—
ibm	websphere_application_server	>= 8.5.0.0 < 8.5.5.29	8.5.5.29
ibm	websphere_application_server	>= 9.0.0.0 < 9.0.5.25	9.0.5.25

CWE-295