Data Exposure Vulnerability in IBM Cognos Analytics Mobile for iOS
CVE-2025-36106

6.5MEDIUM

Key Information:

Vendor

IBM
Status
Cognos Analytics Mobile
Vendor
CVE Published:
21 July 2025

What is CVE-2025-36106?

IBM Cognos Analytics Mobile for iOS contains a vulnerability that enables malicious actors to intercept and manipulate data transmitted to and from the application. This exploitation is facilitated by the presence of a deprecated or misconfigured AFNetworking library during runtime. Such a breach could provide an attacker with unauthorized access to sensitive information stored on the device or accessible over the network, posing significant risks to user privacy and data integrity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Cognos Analytics Mobile iOS 1.1.0 <= 1.1.22

References

https://www.ibm.com/support/pages/node/7239635
vendor-advisorypatch

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.