2025 CVE Vulnerabilities
45,138 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-36419 | MEDIUM | 5.3 | 0.2% | Jan 20, 2026 | IBM ApplinX 11.1 could disclose sensitive information about server architecture that could aid in further attacks agains... |
| CVE-2025-36410 | MEDIUM | 4.3 | 0.2% | Jan 20, 2026 | IBM ApplinX 11.1 could allow an authenticated user to perform unauthorized administrative actions on the server due to s... |
| CVE-2025-36409 | MEDIUM | 5.4 | 0.1% | Jan 20, 2026 | IBM ApplinX 11.1 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitra... |
| CVE-2025-36408 | MEDIUM | 6.4 | 0.2% | Jan 20, 2026 | IBM ApplinX 11.1 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed ... |
| CVE-2025-36397 | MEDIUM | 5.4 | 0.2% | Jan 20, 2026 | IBM Application Gateway 23.10 through 25.09 is vulnerable to HTML injection. A remote attacker could inject malicious HT... |
| CVE-2025-36396 | MEDIUM | 5.4 | 0.1% | Jan 20, 2026 | IBM Application Gateway 23.10 through 25.09 is vulnerable to cross-site scripting. This vulnerability allows an authenti... |
| CVE-2025-36115 | MEDIUM | 6.5 | 0.1% | Jan 20, 2026 | IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0.00 through 5.2.0.12 does not disallow the session... |
| CVE-2025-36113 | MEDIUM | 5.4 | 0.1% | Jan 20, 2026 | IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 5.2.0.00 through 5.2.0.12 is vulnerable to cross-... |
| CVE-2025-36066 | MEDIUM | 6.1 | 0.2% | Jan 20, 2026 | IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 5.2.0.00 through 5.2.0.12 is vulnerable to cross-... |
| CVE-2025-36065 | MEDIUM | 6.5 | 0.2% | Jan 20, 2026 | IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 5.2.0.00 through 5.2.0.12 does not invalidate ses... |
| CVE-2025-36063 | MEDIUM | 6.5 | 0.1% | Jan 20, 2026 | IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 5.2.0.00 through 5.2.0.12 does not invalidate ses... |
| CVE-2025-36059 | MEDIUM | 5.5 | 0.1% | Jan 20, 2026 | IBM Business Automation Workflow containers 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005... |
| CVE-2025-36058 | MEDIUM | 5.5 | 0.1% | Jan 20, 2026 | IBM Business Automation Workflow containers 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005... |
| CVE-2025-58095 | MEDIUM | 6.1 | 0.2% | Jan 20, 2026 | Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Pre... |
| CVE-2025-58094 | MEDIUM | 6.1 | 0.2% | Jan 20, 2026 | Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Pre... |
| CVE-2025-58093 | MEDIUM | 6.1 | 0.2% | Jan 20, 2026 | Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Pre... |
| CVE-2025-58092 | MEDIUM | 6.1 | 0.2% | Jan 20, 2026 | Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Pre... |
| CVE-2025-58091 | MEDIUM | 6.1 | 0.2% | Jan 20, 2026 | Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Pre... |
| CVE-2025-58090 | MEDIUM | 6.1 | 0.2% | Jan 20, 2026 | Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Pre... |
| CVE-2025-58089 | MEDIUM | 6.1 | 0.2% | Jan 20, 2026 | Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Pre... |
| CVE-2025-58088 | MEDIUM | 6.1 | 0.2% | Jan 20, 2026 | Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Pre... |
| CVE-2025-58087 | MEDIUM | 6.1 | 0.2% | Jan 20, 2026 | Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Pre... |
| CVE-2025-58080 | MEDIUM | 5.4 | 0.2% | Jan 20, 2026 | A reflected cross-site scripting (xss) vulnerability exists in the modifyHL7App functionality of MedDream PACS Premium 7... |
| CVE-2025-57881 | MEDIUM | 5.4 | 0.2% | Jan 20, 2026 | A reflected cross-site scripting (xss) vulnerability exists in the modifyEmail functionality of MedDream PACS Premium 7.... |
| CVE-2025-57787 | MEDIUM | 6.1 | 0.3% | Jan 20, 2026 | A reflected cross-site scripting (xss) vulnerability exists in the modifyRoute functionality of MedDream PACS Premium 7.... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now