CVE-2025-36075

EUVD-2025-211279
IBM Safer Payments 6.4.0.00 through 6.4.2.11, 6.5.0.00 through 6.5.0.09, 6.6.0.00 through 6.6.0.07, 6.7.0.00 through 6.7.0.03, and 6.8.0.00 could allow an authenticated user to obtain sensitive information, caused by improper user input validation. By using a set of API requests the user could exploit this vulnerability to decrypt sensitive information.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
ibmCNA
5.3 MEDIUM
NETWORK
HIGH
LOW
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources (CNA/ADP records, vendor advisories, Enginsight analysis).
VendorProductVersionSource
ibmsafer_payments
6.4.0.0 ≤
𝑥
≤ 6.4.2.11
CNA
ibmsafer_payments
6.5.0.0 ≤
𝑥
≤ 6.5.0.9
CNA
ibmsafer_payments
6.6.0.0 ≤
𝑥
≤ 6.6.0.7
CNA
ibmsafer_payments
6.7.0.0 ≤
𝑥
≤ 6.7.0.3
CNA
ibmsafer_payments
6.8.0.0
CNA