CVE-2025-3357 IBM Tivoli Monitoring code execution

What is CVE-2025-3357?

CVE-2025-3357 is a critical memory corruption vulnerability in IBM Tivoli Monitoring, published on 28 May 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 19 could allow a remote attacker to execute arbitrary code due to improper validation of an index value of a dynamically allocated array.

Weakness: CWE-129, CWE-1285

Which versions are affected by CVE-2025-3357?

It affects 1 product.

Products include Ibm Tivoli Monitoring.

How do I fix CVE-2025-3357?

No fix has been published for CVE-2025-3357 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2025-3357 being exploited?

There is no known exploitation of CVE-2025-3357 in the wild and no public exploit code.

Other vulnerabilities in IBM Tivoli Monitoring

• CVE-2015-7411 Privilege escalation in n/a Critical 9.9
• CVE-2017-1789 Code injection in Tivoli Monitoring V6 Critical 9.8
• CVE-2025-3356 IBM Tivoli Monitoring is vulnerable to unauthenticated file read and write operations High 8.6
• CVE-2015-5003 Command injection in n/a High 8.5
• CVE-2014-6141 Privilege escalation in n/a High 8.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-f5w7-cjpw-qq45.