CVE-2025-2134

LOW

IBM Jazz Reporting Service - Authenticated Denial of Service via Complicated Queries

Title source: llm
STIX 2.1

Description

IBM Jazz Reporting Service could allow an authenticated user on the network to affect the system's performance using complicated queries due to insufficient resource pooling.

References (1)

Core 1
Core References
Various Sources vendor-advisory patch
https://www.ibm.com/support/pages/node/7258083

Scores

CVSS v3 3.5
EPSS 0.0001
EPSS Percentile 2.2%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-410
Status published
Products (2)
ibm/jazz_reporting_service 7.0.3 (21 CPE variants)
ibm/jazz_reporting_service 7.1 (7 CPE variants)
Published Feb 04, 2026
Tracked Since Feb 18, 2026