{
  "cveId": "CVE-2025-2900",
  "url": "https://patchblox.com/security/cve/CVE-2025-2900",
  "summary": "CVE-2025-2900 is fixed in java on 1 platform by RHSA-2025:8063 (version 21-ibm-semeru-certified-jdk-1:21.0.7.0.6-1.el10_0), released May 14, 2025. It is not reported as exploited. Patch Radar priority: High.",
  "title": "java: IBM Semeru Runtime 8.0.302.0 through 8.0.442.0, 11.0.12.0 through 11.0.26.0, 17.0.0.0 through 17.0.14.0, and 21.0.0.0...",
  "description": "IBM Semeru Runtime 8.0.302.0 through 8.0.442.0, 11.0.12.0 through 11.0.26.0, 17.0.0.0 through 17.0.14.0, and 21.0.0.0 through 12.0.6.0 is vulnerable to a denial of service caused by a buffer overflow and subsequent crash, due to a defect in its native AES/CBC encryption implementation.",
  "published": "2025-05-14T18:50:27Z",
  "severity": "important",
  "cvss": 7.5,
  "epss": 0.00281,
  "epssPercentile": 0.20709,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "java",
      "release": "RHEL 10",
      "fixedVersion": "21-ibm-semeru-certified-jdk-1:21.0.7.0.6-1.el10_0",
      "fix": "RHSA-2025:8063",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-8063",
      "released": "2025-05-14T18:50:27Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}