CVE-2025-36090: medium-severity vulnerability in IBM Analytics Content Hub
IBM Analytics Content Hub information disclosure
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4.3epss 0.3%
IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 could allow a remote attacker to obtain information about the application framework which could be used in reconnaissance to gather information for future attacks from a detailed technical error message.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Affected products
IBM · Analytics Content HubRelated CVEs — IBM Analytics Content Hub
In the same product, most dangerous first.
CVE-2024-39750HIGHIBM Analytics Content Hub buffer overflowEPSS 0.7%CVE-2024-35134MEDIUMIBM Analytics Content Hub information disclosureEPSS 0.4%CVE-2024-37524MEDIUMIBM Analytics Content Hub information disclosureEPSS 0.3%CVE-2024-39752MEDIUMIBM Analytics Content Hub file uploadEPSS 0.3%CVE-2024-38327MEDIUMIBM Analytics Content Hub information disclosureEPSS 0.3%