CVE-2025-36187CWE-532
Multiple Security vulnerabilities affecting IBM Knowledge Catalog Standard Cartridge
Medium · published March 25, 2026
What it is
IBM Knowledge Catalog Standard Cartridge 5.0.0, 5.0.1, 5.0.2, 5.0.3, 5.1, 5.1.1, 5,1.2, 5.1.3, 5.2.0, 5.2.1 stores potentially sensitive information in log files that could be read by a local privileged user.
The record
Technical detail
- CVSS v3.1
- 4.4 · MEDIUM
- Vector
- CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00159 · 4.6th percentile
- Weakness
- CWE-532 · Insertion of Sensitive Information into Log File
- Published
- 2026-03-25T21:26Z
EPSS history
Timeline