CVE-2025-36003

IBM Security Verify Governance Identity Manager 10.0.2 could allow a remote attacker to obtain sensitive information when detailed technical error messages are returned. This information could be used in further attacks against the system.

Scoring

Severity

HIGH

CVSS base score

7.5

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS probability

0.34%

CWE

CWE-209

Published

2025-08-28

Last modified

2026-03-13

Affected products

• IBM Security Verify Governance Identity Manager

Weakness type

• CWE-209

Related vulnerabilities

• CVE-2026-66306 — Skype for Business Information Disclosure Vulnerability
• CVE-2026-69294 — Microsoft COM for Windows Information Disclosure Vulnerability
• CVE-2026-68886 — Windows Network Connection Broker Information Disclosure Vulnerability
• CVE-2026-67383 — Microsoft SQL Server Information Disclosure Vulnerability
• CVE-2026-69684 — Windows Error Reporting Information Disclosure Vulnerability
• CVE-2026-69552 — Windows Print Spooler Components Information Disclosure Vulnerability
• CVE-2026-11873 — Pki-core: dogtag-pki: empty request to dogtag /ca/rest/certrequests causes http 500, java exception, and stacktrace disclosure
• CVE-2026-82739 — Ash.Resource.Validation.Confirm leaks a confirmed field's stored value in the atomic mismatch error

Markdown version · Browse all CVEs