CVE-2025-36258CWE-256

IBM InfoSphere Information Server is vulnerable due to plaintext storage of a password

High · published March 25, 2026

CVSS v3.1
7.1
EPSS
0%
Percentile
4.6
In the wild
Unconfirmed
What it is

IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 product stores user credentials and other sensitive information in plain text which can be read by a local user.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00158 · 4.6th percentile
Weakness
CWE-256 · Plaintext Storage of a Password
Published
2026-03-25T20:25Z
EPSS history
Timeline
  • 25 MAR 20:25Z
    IBM InfoSphere Information Server is vulnerable due to plaintext storage of a password
    cvelistv5