CVE-2025-14115 — Vulnetix

Try Vulnetix Request Demo

CVE-2025-14115 PUBLISHED CVSS 8.399999618530273 HIGH

IBM Sterling Connect:Direct for UNIX Container 6.3.0.0 through 6.3.0.6 Interim Fix 016, and 6.4.0.0 through 6.4.0.3 Interim Fix 019 IBM® Sterling Connect:Direct for UNIX contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.

EPSS 0.01% · 1.4th percentile

Risk Scores

CVSS v3.1

8.399999618530273

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

0.01%

1.4th percentile

Affected Products

Vendor	Product	Versions
IBM	Sterling Connect:Direct for UNIX Container	6.3.0.0, 6.4.0.0

Timeline

Dec 5, 2025 CVE ID Reserved
Jan 16, 2026 PoC Published
Jan 20, 2026 CVE Published
Jan 20, 2026 PoC Published
Jan 20, 2026 PoC Published
Jan 20, 2026 PoC Published
Jan 21, 2026 EPSS Score
Jan 21, 2026 PoC Published
Jan 23, 2026 EPSS Score
Jan 25, 2026 EPSS Score
Jan 28, 2026 EPSS Score
Jan 30, 2026 EPSS Score

References

https://www.ibm.com/support/pages/node/7257143 vendor-advisory
https://www.ibm.com/support/pages/node/7257005 advisory
https://www.ibm.com/support/pages/node/7256865 advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-14115 advisory

Open in Interactive Console →