Improper Input Validation in IBM Safer Payments
CVE-2025-36075

5.3MEDIUM

Key Information:

Vendor

IBM
Status
Safer Payments
Vendor
CVE Published:
8 November 2026

What is CVE-2025-36075?

IBM Safer Payments versions 6.4.0.00 to 6.4.2.11, 6.5.0.00 to 6.5.0.09, 6.6.0.00 to 6.6.0.07, 6.7.0.00 to 6.7.0.03, and 6.8.0.00 are impacted by a vulnerability that allows authenticated users to exploit improper user input validation. This flaw can be leveraged through a series of carefully crafted API requests, enabling users to decrypt sensitive information, posing significant risks to data security.

Affected Version(s)

Safer Payments 6.4.0.00 <= 6.4.2.11

Safer Payments 6.5.0.00 <= 6.5.0.09

Safer Payments 6.6.0.00 <= 6.6.0.07

References

https://www.ibm.com/support/pages/node/7293213
vendor-advisorypatch

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.