CVE-2025-36221
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk19th percentile - higher than 19% of all known CVEs
Summary
IBM Cloud Pak for Data System - Cyclops 11.3.0.2 through Interim Fix 002 uses default passwords from the manufacturing process during installation. This could allow an attacker to bypass authentication.
Risk Assessment
An attacker can gain unauthorized access to the IBM Cloud Pak for Data system, threatening data confidentiality and integrity, and potentially leading to full system compromise.
Recommendation
Change default passwords to unique, strong passwords after installation and apply appropriate access controls.
Other vulnerabilities in IBM Cloud Pak for Data System
See all- CVE-2026-3686Medium
IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 is vulnerable to a denial of service due to improper limitation of resources.
- CVE-2025-36220Medium
IBM Cloud Pak for Data System - Cyclops versions 11.3.0.2 through Interim Fix 002 is vulnerable to SQL injection. A remote attacker can send crafted SQL statements to view, add, modify, or delete data in the backend database.
Original NVD description (English source)
IBM Cloud Pak for Data System - Cyclops 11.3.0.2 through Interim Fix 002 IBM Cloud Pak for Data System uses default passwords default passwords from the manufacturing process for use during the installation process, which could allow an attacker to bypass authentication.