VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Apr 18, 2025· Updated Jun 17, 2026

CVE-2025-2950

CVE-2025-2950

Description

IBM i 7.3, 7.4, 7.5, and 7.5 is vulnerable to a host header injection attack caused by improper neutralization of HTTP header content by IBM Navigator for i. An authenticated user can manipulate the host header in HTTP requests to change domain/IP address which may lead to unexpected behavior.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • IBM/I5 versions
    cpe:2.3:a:ibm:i:7.3:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:ibm:i:7.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:i:7.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:i:7.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:i:7.6:*:*:*:*:*:*:*
    • (no CPE)range: 7.3, 7.4, 7.5
  • IBM/IBM Navigator for illm-fuzzy

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.