CVE-2025-36411CWE-352
Multiple vulnerabilities found in IBM ApplinX.
Low · published January 20, 2026
What it is
IBM ApplinX 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
The record
Technical detail
- CVSS v3.1
- 3.5 · LOW
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00120 · 1.7th percentile
- Weakness
- CWE-352 · Cross-Site Request Forgery (CSRF)
- Published
- 2026-01-20T15:43Z
EPSS history
Timeline