VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 18, 2025· Updated Aug 28, 2025

IBM i improper HTTP header neutralization

CVE-2025-2950

Description

IBM i 7.3, 7.4, 7.5, and 7.5 is vulnerable to a host header injection attack caused by improper neutralization of HTTP header content by IBM Navigator for i. An authenticated user can manipulate the host header in HTTP requests to change domain/IP address which may lead to unexpected behavior.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • IBM/Iv52 versions
    cpe:2.3:a:ibm:i:7.3:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:i:7.3:*:*:*:*:*:*:*range: 7.3
    • (no CPE)range: 7.3, 7.4, 7.5, 7.5
  • IBM/IBM Navigator for illm-create

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.