CVE-2025-36034 MEDIUM

CVE-2025-36034: IBM InfoSphere DataStage Flow Designer information disclosure

Vendor Ibm
Product InfoSphere Information Server
Weakness CWE-319 · Cleartext transmission
Published June 26, 2025
Last update August 26, 2025
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity High
Privileges required Low
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

IBM InfoSphere DataStage Flow Designer in IBM InfoSphere Information Server 11.7 discloses sensitive user information in API requests in clear text that could be intercepted using man in the middle techniques.

Key dates

02Disclosure timeline

June 26, 2025 CVE published
August 26, 2025 Record updated