IBM TS4300 1.1.0.1 through 1.7.1.1 could allow an authenticated user to cause a denial of service in the email service due to improper control of interaction frequency.
"}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7287022", "tags": ["vendor-advisory", "patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "LOW", "baseSeverity": "MEDIUM", "baseScore": 4.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"}}], "solutions": [{"lang": "en", "value": "For the 1.7.1.1, upgrade to version 1.7.2.0 or later, available from IBM Fix Central http://www-933.ibm.com/support/fixcentral/ . \u00a0\n\n\n\nAll future releases will include the fix for this vulnerability.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "For the 1.7.1.1, upgrade to version 1.7.2.0 or later, available from IBM Fix Central http://www-933.ibm.com/support/fixcentral/. \u00a0
All future releases will include the fix for this vulnerability. \u00a0
"}]}], "x_gcve": [{"vulnId": "CVE-2025-36045", "recordType": "advisory"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-09-22T14:46:37.355697Z", "id": "CVE-2025-36045", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-22T14:46:51.941Z"}}]}, "vulnerability-lookup:meta": {"epss": {"cve": "CVE-2025-36045", "date": "2026-11-08", "epss": "0.00359", "percentile": "0.29891"}, "nvd": "{\"cve\":{\"id\":\"CVE-2025-36045\",\"sourceIdentifier\":\"psirt@us.ibm.com\",\"published\":\"2026-09-18T16:17:02.790\",\"lastModified\":\"2026-10-14T18:10:00.207\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"IBM TS4300 1.1.0.1 through 1.7.1.1 could allow an authenticated user to cause a denial of service in the email service due to improper control of interaction frequency.\"},{\"lang\":\"es\",\"value\":\"IBM TS4300 1.1.0.1 hasta 1.7.1.1 podr\u00eda permitir a un usuario autenticado causar una denegaci\u00f3n de servicio en el servicio de correo electr\u00f3nico debido a un control inadecuado de la frecuencia de interacci\u00f3n.\"}],\"affected\":[{\"source\":\"psirt@us.ibm.com\",\"affectedData\":[{\"vendor\":\"IBM\",\"product\":\"TS4300\",\"cpes\":[\"cpe:2.3:a:ibm:ts4300:1.1.0.1:*:*:*:*:*:*:*\",\"cpe:2.3:a:ibm:ts4300:1.7.1.1:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"1.1.0.1\",\"lessThanOrEqual\":\"1.7.1.1\",\"versionType\":\"semver\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"psirt@us.ibm.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L\",\"baseScore\":4.3,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":2.8,\"impactScore\":1.4}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-09-22T14:46:37.355697Z\",\"id\":\"CVE-2025-36045\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"psirt@us.ibm.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-799\"}]}],\"references\":[{\"url\":\"https://www.ibm.com/support/pages/node/7287022\",\"source\":\"psirt@us.ibm.com\"}]}}", "vulnrichment": {"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-36045\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-09-22T14:46:37.355697Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-09-22T14:46:42.994Z\"}}], \"cna\": {\"title\": \"TS4300 Tape Library addresses security vulnerability\", \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 4.3, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"LOW\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"NONE\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"cpes\": [\"cpe:2.3:a:ibm:ts4300:1.1.0.1:*:*:*:*:*:*:*\", \"cpe:2.3:a:ibm:ts4300:1.7.1.1:*:*:*:*:*:*:*\"], \"vendor\": \"IBM\", \"product\": \"TS4300\", \"versions\": [{\"status\": \"affected\", \"version\": \"1.1.0.1\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"1.7.1.1\"}]}], \"solutions\": [{\"lang\": \"en\", \"value\": \"For the 1.7.1.1, upgrade to version 1.7.2.0 or later, available from IBM Fix Central http://www-933.ibm.com/support/fixcentral/ . \\u00a0\\n\\n\\n\\nAll future releases will include the fix for this vulnerability.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"For the 1.7.1.1, upgrade to version 1.7.2.0 or later, available from IBM Fix Central http://www-933.ibm.com/support/fixcentral/. \\u00a0
All future releases will include the fix for this vulnerability. \\u00a0
\", \"base64\": false}]}], \"references\": [{\"url\": \"https://www.ibm.com/support/pages/node/7287022\", \"tags\": [\"vendor-advisory\", \"patch\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"IBM TS4300 1.1.0.1 through 1.7.1.1 could allow an authenticated user to cause a denial of service in the email service due to improper control of interaction frequency.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"IBM TS4300 1.1.0.1 through 1.7.1.1 could allow an authenticated user to cause a denial of service in the email service due to improper control of interaction frequency.
\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-799\", \"description\": \"CWE-799 Improper Control of Interaction Frequency\"}]}], \"providerMetadata\": {\"orgId\": \"9a959283-ebb5-44b6-b705-dcc2bbced522\", \"shortName\": \"ibm\", \"dateUpdated\": \"2026-09-18T15:41:01.500Z\"}}}", "cveMetadata": "{\"cveId\": \"CVE-2025-36045\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-09-22T14:46:51.941Z\", \"dateReserved\": \"2025-04-15T21:16:10.569Z\", \"assignerOrgId\": \"9a959283-ebb5-44b6-b705-dcc2bbced522\", \"datePublished\": \"2026-09-18T15:41:01.500Z\", \"assignerShortName\": \"ibm\"}", "dataType": "CVE_RECORD", "dataVersion": "5.2"}}}