{"id":"CVE-2025-36034","url":"https://www.cyber-defence.io/tools/cve/CVE-2025-36034","generatedAt":"2026-10-28T05:58:39.159Z","title":"IBM InfoSphere DataStage Flow Designer in IBM InfoSphere Information Server 11.7 discloses sensitive user information in API requests in clear text that could be intercepted using man in the middle techniques.","description":"IBM InfoSphere DataStage Flow Designer in IBM InfoSphere Information Server 11.7 discloses sensitive user information in API requests in clear text that could be intercepted using man in the middle techniques.","published":"2025-06-26T16:15:29.000Z","lastModified":"2026-06-17T09:14:24.000Z","status":"Analyzed","sourceIdentifier":"psirt@us.ibm.com","cvss":{"version":"3.1","score":5.9,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"},"cwe":["CWE-319"],"affected":["ibm/infosphere information server"],"epss":{"score":0.0017,"percentile":0.06299,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.17%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://www.ibm.com/support/pages/node/7237604","tags":["Vendor Advisory"],"source":"psirt@us.ibm.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2025-36034","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}