CVE-2025-36262 MEDIUM

CVE-2025-36262: IBM Planning Analytics Local information disclosure

Vendor Ibm
Product Planning Analytics Local
Weakness CWE-1286
Published September 30, 2025
Last update September 30, 2025
View on NVD All CVEs

CVSS base score

4.9/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

IBM Planning Analytics Local 2.0.0 through 2.0.106 and 2.1.0 through 2.1.13 could allow a malicious privileged user to bypass the UI to gain unauthorized access to sensitive information due to the improper validation of input.

Key dates

02Disclosure timeline

September 30, 2025 CVE published
September 30, 2025 Record updated