Information Exposure in IBM Cognos Analytics Mobile for iOS
CVE-2025-36062

5.9MEDIUM

Key Information:

Vendor

IBM
Status
Cognos Analytics Mobile
Vendor
CVE Published:
21 July 2025

What is CVE-2025-36062?

IBM Cognos Analytics Mobile for iOS versions 1.1.0 through 1.1.22 may allow unauthorized access to sensitive information due to the transmission of unencrypted data over the network. This vulnerability creates a risk of information exposure, which could be exploited by malicious actors to gain access to confidential data. Users are advised to apply security patches and adopt secure communication practices to mitigate this risk.

Affected Version(s)

Cognos Analytics Mobile iOS 1.1.0 <= 1.1.22

References

https://www.ibm.com/support/pages/node/7239635
vendor-advisory

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.