Vulnerability · Published Feb 2, 2026 · Assigned by ibm

CVE-2025-15395IBM Jazz Foundation access control violation

Medium 4.3

In plain English

A medium-severity incorrect authorization in Jazz Foundation from IBM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities).

Severity (CVSS 3.1)4.3Medium

Exploit odds (30 days)0.2%top 90.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

IBM Jazz Foundation 7.0.3 through 7.0.3 iFix019 and 7.1.0 through 7.1.0 iFix005 is vulnerable to access control violations that allows the users to view or access/perform actions beyond their expected capability.

Affected products (as reported)

Vendor	Product	Versions
IBM	Jazz Foundation	7.0.3 – through 7.0.3 iFix0197.1.0 – through 7.1.0 iFix005

Weakness: CWE-863 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

References

https://www.ibm.com/support/pages/node/7258304 vendor-advisory, patch