CVE-2025-36271
IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 5.9
- CVSS vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- EPSS probability
- 0.16%
- CWE
- CWE-759
- Published
- 2026-08-28
- Last modified
- 2026-08-31
Affected products
- IBM Integrated Analytics System
Weakness type
Related vulnerabilities
- CVE-2026-6217 — Information Disclosure in Pik Online Software's Portal
- CVE-2026-57263 — A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9). The project password...
- CVE-2025-15631 — Weak Credential Storage in TP-Link Omada Devices
- CVE-2025-15544 — Weak Credential Protection During TP-Link Omada Device Adoption
- CVE-2026-45787 — electerm's encrypt method not safe enough
- CVE-2026-45027 — WeGIA: Use of Weak Password Hashing Algorithm (SHA-256, no salt) in html/login.php
- CVE-2026-9370 — ulisesbocchio jasypt-spring-boot Password Hash SimpleGCMConfig.java getSecretKeySaltGenerator hash predictable salt
- CVE-2025-36253 — Multiple Vulnerabilities in IBM Concert Software.