CVE-2025-15395

IBM Jazz Foundation access control violation

CVSS 4.3 MEDIUMEPSS 0.2%CWE-863

Vexday Risk Score

13Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 4.3EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado

Lifecycle

02 Feb 2026Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

IBM Jazz Foundation 7.0.3 through 7.0.3 iFix019 and 7.1.0 through 7.1.0 iFix005 is vulnerable to access control violations that allows the users to view or access/perform actions beyond their expected capability.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Affected products

IBM · Jazz Foundation

References

https://www.ibm.com/support/pages/node/7258304