← Back

CVE-2025-36336

nvd nist
Published: Jun 30, 2026Modified: Jul 6, 2026

JSON object

Loading...
5.9
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 2.2 / Impact: 3.6
Source: psirt@us.ibm.com (Secondary)

Description

IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 transmits data in clear text that could allow an attacker to obtain sensitive information using man in the middle techniques.

Affected (1)

Ibm
1 product
Watsonx.data Intelligence
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Watsonx.data Intelligence
All versions
Running on/withPlatform Versions
Ibm
Software Hub
From 5.2.0 to 5.3.1

Related CWEs

CWE-319
Cleartext Transmission of Sensitive Information
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.