Skip to content
Sign in
5.4 Medium

CVE-2025-2950 IBM i 7.3, 7.4, 7.5, and 7.5 is vulnerable to a host header injection attack caused by improper neutralization of HTTP…

Description

IBM i 7.3, 7.4, 7.5, and 7.5 is vulnerable to a host header injection attack caused by improper neutralization of HTTP header content by IBM Navigator for i. An authenticated user can manipulate the host header in HTTP requests to change domain/IP address which may lead to unexpected behavior.

Affected products and versions

Product Affected versions Fixed in
i 7.6 No fix stated
i 7.5 No fix stated
i 7.4 No fix stated
i 7.3 No fix stated

Other CVEs of i

The 214 CVEs of i →
CVE-2026-93744 IBM i 7.3, 7.4, 7.5, and 7.6 could allow an unathenticated remote attacker to bypass security restrictions due to… 6.5 Medium CVE-2026-17068 IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version restrictions due to improper enforcement… 5.4 Medium CVE-2026-17073 IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to obtain sensitive information due to missing subtree… 5.4 Medium CVE-2026-17275 IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform unauthorized manipulation of distributed… 3.7 Low
Track this CVE