CVE-2025-36271

MediumCVSS 5.9

Published: 28/08/2026(UTC)Translated: 29/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

6th percentile - higher than 6% of all known CVEs

Summary

IBM Integrated Analytics System versions 1.0.0.0 through 1.0.31.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

Risk Assessment

Weak cryptographic algorithms could allow an attacker to break encryption and access confidential data, posing a serious risk to information security.

Recommendation

Update IBM Integrated Analytics System to a version that uses stronger cryptographic algorithms. Review configuration and enforce secure encryption protocols.

Other vulnerabilities in IBM Integrated Analytics System

CVE-2025-36290Medium
IBM Integrated Analytics System versions 1.0.0.0 through 1.0.31.0 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man-in-the-middle techniques.

Original NVD description (English source)

IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.