What’s Vulnerable › Vulnerabilities
CVE-2025-36034: IBM InfoSphere DataStage Flow Designer information disclosure
- Severity: medium (CVSS 5.9 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-06-26 · updated 2026-06-17
- Weakness: CWE-319
Description
IBM InfoSphere DataStage Flow Designer in IBM InfoSphere Information Server 11.7 discloses sensitive user information in API requests in clear text that could be intercepted using man in the middle techniques.
Affected products
References
Get alerted when CVE-2025-36034 or the next vulnerability affects your stack