CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.9. It affects Java, OpenSSL. It may be remotely exploitable.
CVE
CVE-2025-55118
Severity
HIGH
CVSS
8.9
EPSS
0.34%
Java OpenSSL
Original NVD Description
Memory corruptions can be remotely triggered in the Control-M/Agent when SSL/TLS communication is configured. The issue occurs in the following cases: * Control-M/Agent 9.0.20: SSL/TLS configuration is set to the non-default setting "use_openssl=n"; * Control-M/Agent 9.0.21 and 9.0.22: Agent router configuration uses the non-default settings "JAVA_AR=N" and "use_openssl=n"