CVE-2025-36290mediumCWE-295

CVE-2025-36290: medium-severity vulnerability in IBM Integrated Analytics System

IBM Integrated Analytics System (IIAS) is affected by improper SSL/TLS certificate validation vulnerability in JWT service component

Published · Updated

Follow this CVE+ Monitor Integrated Analytics System

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.9epss 0.2%
IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
IBM · Integrated Analytics System
Related CVEs — IBM Integrated Analytics System

In the same product, most dangerous first.

CVE-2025-36174HIGHIBM Integrated Analytics System file uploadEPSS 0.4%CVE-2025-36271MEDIUMIBM Integrated Analytics System (IIAS) is affected by a predictable salt vulnerability in Magneto componentEPSS 0.2%