CVE-2025-36090CWE-209
IBM Analytics Content Hub information disclosure
Medium · published July 10, 2025
What it is
IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 could allow a remote attacker to obtain information about the application framework which could be used in reconnaissance to gather information for future attacks from a detailed technical error message.
The record
Technical detail
- CVSS v3.1
- 4.3 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00319 · 23.7th percentile
- Weakness
- CWE-209 · Generation of Error Message Containing Sensitive Information
- Published
- 2025-07-10T14:12Z
EPSS history
Timeline