CVE-2025-13333 IBM WebSphere Application Server could provide weaker than expected security
IBM WebSphere Application Server may enforce weaker security settings during administration, potentially allowing bypass of intended protections.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-13333?
CVE-2025-13333 is a medium-severity vulnerability in Ibm Websphere Application Server, published on 17 Feb 2026. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
IBM WebSphere Application Server 9.0, and 8.5 could provide weaker than expected security during system administration of security settings.
Weakness: CWE-358
Which versions are affected by CVE-2025-13333?
It affects 1 product.
Products include Ibm Websphere Application Server.
How do I fix CVE-2025-13333?
No fix has been published for CVE-2025-13333 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-13333 being exploited?
There is no known exploitation of CVE-2025-13333 in the wild and no public exploit code.
Other vulnerabilities in Ibm Websphere Application Server
Sources
Also known as GHSA-jm7g-jgq2-cxf3.