CVE-2025-36336CWE-319
CVE-2025-36336
Medium · published July 1, 2026
What it is
IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 transmits data in clear text that could allow an attacker to obtain sensitive information using man in the middle techniques.
The record
Technical detail
- CVSS v3.1
- 5.9 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00203 · 9.8th percentile
- Weakness
- CWE-319 · Cleartext Transmission of Sensitive Information
- Published
- 2026-07-01T01:16Z
Affected products (1)
| Product | Versions | Fixed in |
|---|
| ibm/watsonx.data_intelligence | all versions | — |
References (1)
EPSS history
Timeline