CVE 2.9 LOW

IBM Terracotta denial of service_CVE-2025-2529

2.9 / 10
LOW
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Description

Applications using affected versions of Ehcache 3.x can experience degraded cache-write performance if the application using Ehcache utilizes keys sourced from (malicious) external parties in an unfiltered/unsalted way.

Basic Information

ID CVE-2025-2529
Source ibm
Published Oct 15, 2025 at 15:29

Affected Product

Vendor IBM
Product Terracotta
Version 10.15.0
Affected Versions IBM Terracotta 10.15.0
IBM Terracotta 11.1.0

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.