CVE-2025-36075

Full vulnerability record from the local CVENow database.

Description

IBM Safer Payments 6.4.0.00 through 6.4.2.11, 6.5.0.00 through 6.5.0.09, 6.6.0.00 through 6.6.0.07, 6.7.0.00 through 6.7.0.03, and 6.8.0.00 could allow an authenticated user to obtain sensitive information, caused by improper user input validation. By using a set of API requests the user could exploit this vulnerability to decrypt sensitive information.

Severity

MEDIUM

CVSS score

5.3 (v3.1)

Vulnerability status

Awaiting Analysis

Source identifier

[email protected]

Published

2026-11-08 16:16:35.930000

Last modified

2026-11-08 16:16:36.050000

View original CVE JSON

{
  "id": "CVE-2025-36075",
  "sourceIdentifier": "[email protected]",
  "published": "2026-11-08T16:16:35.930",
  "lastModified": "2026-11-08T16:16:36.050",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "IBM Safer Payments 6.4.0.00 through 6.4.2.11, 6.5.0.00 through 6.5.0.09, 6.6.0.00 through 6.6.0.07, 6.7.0.00 through 6.7.0.03, and 6.8.0.00 could allow an authenticated user to obtain sensitive information, caused by improper user input validation. By using a set of API requests the user could exploit this vulnerability to decrypt sensitive information."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "IBM",
          "product": "Safer Payments",
          "versions": [
            {
              "version": "6.4.0.00",
              "lessThanOrEqual": "6.4.2.11",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "6.5.0.00",
              "lessThanOrEqual": "6.5.0.09",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "6.6.0.00",
              "lessThanOrEqual": "6.6.0.07",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "6.7.0.00",
              "lessThanOrEqual": "6.7.0.03",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "6.8.0.00",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Primary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
          "baseScore": 5.3,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "HIGH",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 1.6,
        "impactScore": 3.6
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-1287"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.ibm.com/support/pages/node/7293213",
      "source": "[email protected]"
    }
  ]
}