CVE-2025-36299CWE-540

CVE-2025-36299

Medium · published November 18, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
13.0
In the wild
Unconfirmed
What it is

IBM Planning Analytics Local 2.1.0 through 2.1.14 stores sensitive information in source code could be used in further attacks against the system.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00230 · 13.0th percentile
Weakness
CWE-540 · Inclusion of Sensitive Information in Source Code
Published
2025-11-18T01:15Z
Affected products (2)
ProductVersionsFixed in
ibm/planning_analytics_local≥ 2.1.0, < 2.1.152.1.15
ibm/planning_analytics_workspace≥ 2.1.0, < 2.1.152.1.15
References (1)
https://www.ibm.com/support/pages/node/7251265 · [email protected]
EPSS history
Timeline
  • 17 NOV 20:09Z
    IBM Planning Analytics Information Disclosure
    cvelistv5