CVE-2025-33150CWE-552

CVE-2025-33150

Medium · published November 11, 2025

CVSS v3.1
5.3
EPSS
0%
Percentile
15.7
In the wild
Unconfirmed
What it is

IBM Cognos Analytics Certified Containers 12.1.0 could disclose package parameter information due to the presence of hidden pages.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00251 · 15.7th percentile
Weakness
CWE-552 · Files or Directories Accessible to External Parties
Published
2025-11-11T01:15Z
Affected products (1)
ProductVersionsFixed in
ibm/cognos_analytics_certified_containersall versions—
References (1)
https://www.ibm.com/support/pages/node/7250395 · [email protected]
EPSS history
Timeline
  • 10 NOV 19:33Z
    IBM Cognos Analytics Certified Containers information disclosure
    cvelistv5