{"api_version":"1","generated_at":"2026-11-08T17:01:11+00:00","cve":"CVE-2025-36075","urls":{"html":"https://cve.report/CVE-2025-36075","api":"https://cve.report/api/cve/CVE-2025-36075.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2025-36075","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2025-36075"},"summary":{"title":"IBM Safer Payments could allow an authenticated user to obtain sensitive information","description":"IBM Safer Payments 6.4.0.00 through 6.4.2.11, 6.5.0.00 through 6.5.0.09, 6.6.0.00 through 6.6.0.07, 6.7.0.00 through 6.7.0.03, and 6.8.0.00 could allow an authenticated user to obtain sensitive information, caused by improper user input validation. By using a set of API requests the user could exploit this vulnerability to decrypt sensitive information.","state":"PUBLISHED","assigner":"ibm","published_at":"2026-11-08 16:16:35","updated_at":"2026-11-08 16:16:36"},"problem_types":["CWE-1287","CWE-1287 CWE-1287 Improper Validation of Specified Type of Input"],"metrics":[{"version":"3.1","source":"psirt@us.ibm.com","type":"Primary","score":"5.3","severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"}},{"version":"3.1","source":"CNA","type":"CVSS","score":"5.3","severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","data":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"}}],"references":[{"url":"https://www.ibm.com/support/pages/node/7293213","name":"https://www.ibm.com/support/pages/node/7293213","refsource":"psirt@us.ibm.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-36075","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-36075","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"IBM","product":"Safer Payments","version":"affected 6.4.0.00 6.4.2.11 semver","platforms":[]},{"source":"CNA","vendor":"IBM","product":"Safer Payments","version":"affected 6.5.0.00 6.5.0.09 semver","platforms":[]},{"source":"CNA","vendor":"IBM","product":"Safer Payments","version":"affected 6.6.0.00 6.6.0.07 semver","platforms":[]},{"source":"CNA","vendor":"IBM","product":"Safer Payments","version":"affected 6.7.0.00 6.7.0.03 semver","platforms":[]},{"source":"CNA","vendor":"IBM","product":"Safer Payments","version":"affected 6.8.0.00 semver","platforms":[]}],"timeline":[],"solutions":[{"source":"CNA","title":"","value":"Update IBM Safer Payments to version 6.4.2.12, 6.5.0.10, 6.6.0.08, 6.7.0.04, 6.8.0.01 or higher.\n\n\n\nRefer to the  IBM Safer Payments documentation https://www.ibm.com/docs/en/safer-payments  to download the updates.","time":"","lang":"en"}],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"cna":{"affected":[{"product":"Safer Payments","vendor":"IBM","versions":[{"lessThanOrEqual":"6.4.2.11","status":"affected","version":"6.4.0.00","versionType":"semver"},{"lessThanOrEqual":"6.5.0.09","status":"affected","version":"6.5.0.00","versionType":"semver"},{"lessThanOrEqual":"6.6.0.07","status":"affected","version":"6.6.0.00","versionType":"semver"},{"lessThanOrEqual":"6.7.0.03","status":"affected","version":"6.7.0.00","versionType":"semver"},{"status":"affected","version":"6.8.0.00","versionType":"semver"}]}],"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:ibm:safer_payments:*:*:*:*:*:*:*:*","versionEndIncluding":"6.4.2.11","versionStartIncluding":"6.4.0.00","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:safer_payments:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5.0.09","versionStartIncluding":"6.5.0.00","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:safer_payments:*:*:*:*:*:*:*:*","versionEndIncluding":"6.6.0.07","versionStartIncluding":"6.6.0.00","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:safer_payments:*:*:*:*:*:*:*:*","versionEndIncluding":"6.7.0.03","versionStartIncluding":"6.7.0.00","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:safer_payments:6.8.0.00:*:*:*:*:*:*:*","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"}],"descriptions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<p>IBM Safer Payments 6.4.0.00 through 6.4.2.11, 6.5.0.00 through 6.5.0.09, 6.6.0.00 through 6.6.0.07, 6.7.0.00 through 6.7.0.03, and 6.8.0.00 could allow an authenticated user to obtain sensitive information, caused by improper user input validation. By using a set of API requests the user could exploit this vulnerability to decrypt sensitive information.</p>"}],"value":"IBM Safer Payments 6.4.0.00 through 6.4.2.11, 6.5.0.00 through 6.5.0.09, 6.6.0.00 through 6.6.0.07, 6.7.0.00 through 6.7.0.03, and 6.8.0.00 could allow an authenticated user to obtain sensitive information, caused by improper user input validation. By using a set of API requests the user could exploit this vulnerability to decrypt sensitive information."}],"metrics":[{"cvssV3_1":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-1287","description":"CWE-1287 Improper Validation of Specified Type of Input","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-11-08T16:07:01.387Z","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","shortName":"ibm"},"references":[{"tags":["vendor-advisory","patch"],"url":"https://www.ibm.com/support/pages/node/7293213"}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<p>Update IBM Safer Payments to version 6.4.2.12, 6.5.0.10, 6.6.0.08, 6.7.0.04, 6.8.0.01 or higher.</p><p>Refer to the <a href=\"https://www.ibm.com/docs/en/safer-payments\" rel=\"nofollow\">IBM Safer Payments documentation</a> to download the updates.</p>"}],"value":"Update IBM Safer Payments to version 6.4.2.12, 6.5.0.10, 6.6.0.08, 6.7.0.04, 6.8.0.01 or higher.\n\n\n\nRefer to the  IBM Safer Payments documentation https://www.ibm.com/docs/en/safer-payments  to download the updates."}],"title":"IBM Safer Payments could allow an authenticated user to obtain sensitive information"}},"cveMetadata":{"assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","assignerShortName":"ibm","cveId":"CVE-2025-36075","datePublished":"2026-11-08T16:07:01.387Z","dateReserved":"2025-04-15T21:16:13.122Z","dateUpdated":"2026-11-08T16:07:01.387Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-11-08 16:16:35","lastModifiedDate":"2026-11-08 16:16:36","problem_types":["CWE-1287","CWE-1287 CWE-1287 Improper Validation of Specified Type of Input"],"metrics":{"cvssMetricV31":[{"source":"psirt@us.ibm.com","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.6,"impactScore":3.6}]},"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2025","CveId":"36075","Ordinal":"1","Title":"IBM Safer Payments could allow an authenticated user to obtain s","CVE":"CVE-2025-36075","Year":"2025"},"notes":[{"CveYear":"2025","CveId":"36075","Ordinal":"1","NoteData":"IBM Safer Payments 6.4.0.00 through 6.4.2.11, 6.5.0.00 through 6.5.0.09, 6.6.0.00 through 6.6.0.07, 6.7.0.00 through 6.7.0.03, and 6.8.0.00 could allow an authenticated user to obtain sensitive information, caused by improper user input validation. By using a set of API requests the user could exploit this vulnerability to decrypt sensitive information.","Type":"Description","Title":"IBM Safer Payments could allow an authenticated user to obtain s"}]}}}