CVE-2025-3356 – IBM Tivoli Monitoring is vulnerable to unauthenticated file read and write operations

CVE ID : CVE-2025-3356

Published : Oct. 30, 2025, 8:15 p.m. | 1 hour, 11 minutes ago

Description : IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 21 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing “dot dot” sequences (/../) to view, overwrite, or append to arbitrary files on the system.

Severity: 8.6 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…