CVE-2025-36411 LOW

CVE-2025-36411: Multiple vulnerabilities found in IBM ApplinX.

Vendor Ibm
Product ApplinX
Weakness CWE-352 · CSRF
Published January 20, 2026
Last update January 20, 2026

CVSS base score

3.5/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

What the vulnerability does

01Description

IBM ApplinX 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

Key dates

02Disclosure timeline

January 20, 2026 CVE published
January 20, 2026 Record updated