CVE-2025-36106
IBM Cognos Analytics Mobile (iOS) information disclosure
- State
- Published
- Severity
- 6.5 Medium
- Published
- Jul 21, 2025
- Updated
- Aug 18, 2025
- Reserved
- Apr 15, 2025
Description
IBM Cognos Analytics Mobile (iOS) 1.1.0 through 1.1.22 could allow malicious actors to view and modify information coming to and from the application which could then be used to access confidential information on the device or network by using a the deprecated or misconfigured AFNetworking library at runtime.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.5 Medium | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N | ibm |
Weaknesses
- CWE-326 Inadequate Encryption Strength
Affected Products
| Product | Versions |
|---|---|
Cognos Analytics MobileIBM |
|
References
- https://www.ibm.com/support/pages/node/7239635vendor-advisorypatch
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.