CVE Vulnerabilities

CVE-2025-36107

Cleartext Transmission of Sensitive Information

Published: Jul 21, 2025 | Modified: Aug 07, 2025
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

IBM Cognos Analytics Mobile (iOS) 1.1.0 through 1.1.22 could allow malicious actors to obtain sensitive information due to the cleartext transmission of data.

Weakness

The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

Affected Software

Name Vendor Start Version End Version
Cognos_analytics_mobile Ibm 1.1.0 (including) 1.1.23 (excluding)

Potential Mitigations

References