Dashboard / CVE-2025-36075

CVE-2025-36075

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 51/100
Published: 2026-11-08 Modified: 2026-11-11 First seen: 2026-11-08 Status: active

Attack Surface

Network No Interaction Conf. Impact

CVSS Vector Breakdown

AV: Network
AC: High
PR: Low
UI: None
S: Unchanged
C: High
I: None
A: None

Description

IBM Safer Payments 6.4.0.00 through 6.4.2.11, 6.5.0.00 through 6.5.0.09, 6.6.0.00 through 6.6.0.07, 6.7.0.00 through 6.7.0.03, and 6.8.0.00 could allow an authenticated user to obtain sensitive information, caused by improper user input validation. By using a set of API requests the user could exploit this vulnerability to decrypt sensitive information.

Weakness Classification (1)

Affected Software (10)

VendorProductVersion
IBM Safer Payments 6.4.0.00
IBM Safer Payments 6.5.0.00
IBM Safer Payments 6.6.0.00
IBM Safer Payments 6.7.0.00
IBM Safer Payments 6.8.0.00
IBM Safer Payments 6.4.0.00
IBM Safer Payments 6.5.0.00
IBM Safer Payments 6.6.0.00
IBM Safer Payments 6.7.0.00
IBM Safer Payments 6.8.0.00

References & Advisories (1)

Bug Bounty Relevance

51 / 100
✓ Network accessible
✓ No user interaction

CVSS Score

5.3 / 10.0 v3.1
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS — Exploitation Probability

0.25%
Raw Score 0.002490
Percentile 16.4%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00249
2026-11-12
0.00249
2026-11-10
0.00249
2026-11-09
0.00249

Intelligence Sources

mitre ref →
nvd ref →

External Links