Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.3

IBM Controller may leak sensitive data via error messages

CVE-2025-1350 · published 1 month ago
Summary

Versions 11.0.0 through 11.0.1 FP7 and 11.1.0 through 11.1.3 FP1 of IBM Controller can show detailed technical error information in a web browser. This data could help an attacker plan further attacks. Apply the latest security updates or patches from IBM to stop the information from being disclosed.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
ibm controller <= 11.0.1 FP7
Original advisory text
Multiple vulnerabilities in IBM Controller
IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
5.3 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-209Generation of Error Message Containing Sensitive Information
Timeline
Published18 Sep 2026
Updated4 Nov 2026
First seen18 Sep 2026
Sources
CVE-2025-1350 · NVD
CVE-2025-1350 · MITRE
Track software like this
Free during beta