CVE-2025-36034

Medium CVSS: 5.3

IBM InfoSphere DataStage Flow Designer in IBM InfoSphere Information Server 11.7 discloses sensitive user information in API requests in clear text that could be intercepted using man in the middle techniques.

Vendor

Ibm

Product

Infosphere Information Server

CWE

CWE-319

Yayın Tarihi

2025-06-26 16:15:28

Güncelleme

2025-08-14 20:57:36

Source Identifier

psirt@us.ibm.com

KEV Date Added

Kategoriler

CWE-319 Infosphere Information Server MEDIUM Ibm 2025

Referanslar

https://www.ibm.com/support/pages/node/7237604

Benzer Kayıtlar

Medium

CVE-2025-13044

IBM Concert 1.0.0 through 2.2.0 creates temporary files with predictable names, which allows local users to overwrite ar…

Medium

CVE-2026-1243

IBM Content Navigator 3.0.15, 3.1.0, and 3.2.0 is vulnerable to cross-site scripting. This vulnerability allows an authe…

Low

CVE-2025-66487

IBM Aspera Shares 1.9.9 through 1.11.0 does not properly rate limit the frequency that an authenticated user can send em…

Medium

CVE-2025-66486

IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML co…

Medium

CVE-2025-66485

IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to HTTP header injection, caused by improper validation of input by…

Medium

CVE-2025-66484

IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to…