Inefficient regular expression complexity in babel - CVE-2025-27789

Vulnerability identifier: #VU105984

CSH Severity: Low

CVSS v4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-27789

CWE-ID: CWE-1333

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient input validation when processing untrusted input with a regular expressions. A remote attacker can pass specially crafted data to the application and perform regular expression denial of service (ReDos) attack.

babel
IBM Security QRadar Log Management AQL Plugin
IBM Concert Software
IBM Observability with Instana
Netcool Operations Insight
IBM Decision Optimization for Cloud Pak for Data
Automation Assets in IBM Cloud Pak for Integration (CP4I)
IBM Watson Knowledge Catalog in Cloud Pak for Data
IBM Watson Discovery for IBM Cloud Pak for Data
IBM Tivoli Netcool/OMNIbus WebGUI
IBM Maximo Application Suite - Manage Component
IBM Maximo Application Suite
Rational Functional Tester (RFT)
IBM Robotic Process Automation
IBM Business Automation Workflow
IBM Cloud Pak for Business Automation
IBM Cloud Pak for Security
App Connect Enterprise Certified Container
Voice Gateway
Db2 Intelligence Center
Cognos Analytics Mobile (Android)
Storage Sentinel Anomaly Scan Engine
Software Support app (Android)
DB2 Data Management Console
Security QRadar EDR
watsonx Orchestrate Cartridge for IBM Cloud Pak for Data
Knowledge Catalog Premium Cartridge
watsonx Orchestrate with watsonx Assistant Cartridge - UAB Component
Storage Ceph
Maximo Application Suite - Edge Data Collector
Maximo Application Suite - Monitor Component
IBM Business Automation Manager Open Editions
Maximo Application Suite - Visual Inspection Component
DevOps Test UI
Platform Navigator in IBM Cloud Pak for Integration (CP4I)
Robotic Process Automation for Cloud Pak
Business Automation Insights
Event Processing
QRadar Deployment Intelligence App
QRadar Hub
watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component
MongoDB Enterprise Advanced with IBM
Db2 Big SQL
watsonx.data
Splunk Machine Learning Toolkit
IBM App Connect Enterprise
Oracle Communications Cloud Native Core Policy
IBM Security SOAR
IBM Security QRadar Analyst Workflow
Splunk Security Orchestration, Automation and Response (SOAR)
IBM QRadar Data Synchronization App

Install updates from vendor's website.

babel - addressed in versions 7.26.10, 8.0.0 alpha.17
IBM Security QRadar Log Management AQL Plugin - update to 1.1.3
IBM Concert Software - update to 2.0.0
Voice Gateway - update to 1.0.8.25
IBM Observability with Instana - update to 1.0.297
Db2 Intelligence Center - update to 1.1.2.0
Cognos Analytics Mobile (Android) - update to 1.1.23
Storage Sentinel Anomaly Scan Engine - update to 2.3.1
Netcool Operations Insight - update to 1.6.15
Software Support app (Android) - update to 2.0.2
watsonx.data - update to 2.2
DB2 Data Management Console - update to 3.1.13.2
Security QRadar EDR - update to 3.12.18
Automation Assets in IBM Cloud Pak for Integration (CP4I) - addressed in versions 4.0.22-sc2, 4.3.5
watsonx Orchestrate Cartridge for IBM Cloud Pak for Data - update to 5.2.0.1
IBM Watson Knowledge Catalog in Cloud Pak for Data - addressed in versions 4.8.9, 5.1.3
IBM Watson Discovery for IBM Cloud Pak for Data - update to 5.2.1
Knowledge Catalog Premium Cartridge - update to 5.2
watsonx Orchestrate with watsonx Assistant Cartridge - UAB Component - update to 5.1.3
Splunk Machine Learning Toolkit - update to 5.6.0
Storage Ceph - update to 8.1
IBM Tivoli Netcool/OMNIbus WebGUI - update to 8.1.0.38
IBM Maximo Application Suite - Manage Component - addressed in versions 8.6.27, 8.7.21, 9.0.14
IBM Maximo Application Suite - addressed in versions 8.10.26, 8.11.23, 9.0.12
Maximo Application Suite - Edge Data Collector - addressed in versions 8.11.24, 9.0.16, 9.1.6
Maximo Application Suite - Monitor Component - addressed in versions 8.10.20, 8.11.18, 9.0.10
IBM Business Automation Manager Open Editions - update to 9.2.1
DevOps Test UI - update to 11.0.7
IBM App Connect Enterprise - addressed in versions 12.0.12.13, 13.0.3.0
Platform Navigator in IBM Cloud Pak for Integration (CP4I) - addressed in versions 16.1.0.26, 16.2.0
IBM Robotic Process Automation - addressed in versions 21.0.7.21, 23.0.20.2
Robotic Process Automation for Cloud Pak - addressed in versions 21.0.7.21, 23.0.20.2
IBM Business Automation Workflow - addressed in versions 24.0.0-IF005, 24.0.1-IF002
IBM Cloud Pak for Business Automation - addressed in versions 24.0.0-IF005, 24.0.1-IF004, 25.0.0
Business Automation Insights - update to 24.0.1.0.4
Event Processing - update to 1.4.1
IBM Cloud Pak for Security - update to 1.11.2.0
IBM Security QRadar Analyst Workflow - update to 3.0.1
QRadar Deployment Intelligence App - update to 3.0.17
IBM QRadar Data Synchronization App - update to 3.2.2
QRadar Hub - update to 3.9.0
watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component - update to 5.2.1
Splunk Security Orchestration, Automation and Response (SOAR) - update to 7.0.0
MongoDB Enterprise Advanced with IBM - addressed in versions 7.0.16, 8.0.8
Db2 Big SQL - update to 8.2.1
App Connect Enterprise Certified Container - addressed in versions 12.0.11, 12.11.0

• https://github.com/babel/babel/pull/17173
• https://github.com/babel/babel/security/advisories/GHSA-968p-4wvh-cqc8

• Inefficient RexExp complexity in Babel
• Multiple vulnerabilities in IBM Software Support app (Android)
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Policy
• Multiple vulnerabilities in IBM Cloud Pak for Security
• Multiple vulnerabilities in IBM Voice Gateway
• Multiple vulnerabilities in IBM Business Automation Workflow
• Multiple vulnerabilities in IBM App Connect Enterprise Certified Container
• IBM App Connect Enterprise update for Babel
• IBM Security SOAR update for Babel
• Multiple vulnerabilities in IBM Observability with Instana (OnPrem)
• IBM Tivoli Netcool/OMNIbus WebGUI update for Babel
• Multiple vulnerabilities in IBM Security QRadar EDR
• Splunk Machine Learning Toolkit update for third-party components
• IBM Robotic Process Automation for Cloud Pak update for Babel
• IBM Maximo Application Suite update for Babel
• Multiple vulnerabilities in IBM QRadar Deployment Intelligence app
• IBM Maximo Application Suite - Manage Component update for Babel
• Multiple vulnerabilities in IBM Cloud Pak for Business Automation
• Multiple vulnerabilities in IBM Watson Knowledge Catalog
• Multiple vulnerabilities in IBM Business Automation Manager Open Editions
• Multiple vulnerabilities in IBM Event Processing
• IBM Maximo Application Suite - Monitor Component update for Babel
• IBM watsonx.data update for Babel
• Multiple vulnerabilities in IBM Decision Optimization for Cloud Pak for Data
• Multiple vulnerabilities in IBM Business Automation Insights
• IBM Cognos Analytics Mobile (Android) update for Babel
• IBM Storage Ceph update for Babel
• IBM Maximo Application Suite - Visual Inspection Component update for Babel
• IBM watsonx Orchestrate with watsonx Assistant Cartridge - UAB Component update for Babel
• Multiple vulnerabilities in IBM QRadar Data Synchronization App
• Multiple vulnerabilities in IBM Concert Software
• IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data update for Babel
• IBM Watson Discovery update for Babel
• IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component update for Babel
• Multiple vulnerabilities in IBM Db2 Intelligence Center
• Multiple vulnerabilities in IBM Security QRadar Log Management AQL Plugin
• Multiple vulnerabilities in IBM QRadar Hub
• Multiple vulnerabilities in Netcool Operations Insight
• Splunk SOAR update for third-party components
• Multiple vulnerabilities in IBM Security QRadar Analyst Workflow for IBM QRadar SIEM
• IBM Edge Data Collector update for Babel
• IBM Db2 Big SQL on Cloud Pak for Data update for Babel
• Multiple vulnerabilities in IBM DB2 Data Management Console
• MongoDB Enterprise Advanced with IBM update for Babel
• Multiple vulnerabilities in IBM Knowledge Catalog Premium Cartridge
• IBM Rational Functional Tester / DevOps Test UI update for Babel
• Platform Navigator and Automation Assets in IBM Cloud Pak for Integration update for Babel
• Multiple vulnerabilities in IBM Storage Sentinel Anomaly Scan Engine