CVE-2025-36106

published 2025-07-21

CVE-2025-36106: IBM Cognos Analytics Mobile (iOS) 1.1.0 through 1.1.22 could allow malicious actors to view and modify information coming to and from the application which…

high 8.2 CVSS 3.1

AV N AC L PR N UI N S U C H I L A N

IBM Cognos Analytics Mobile (iOS) 1.1.0 through 1.1.22 could allow malicious actors to view and modify information coming to and from the application which could then be used to access confidential information on the device or network by using a the deprecated or misconfigured AFNetworking library at runtime.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
ibm	cognos_analytics_mobile	>= 1.1.0 < 1.1.23	1.1.23
ibm	cognos_analytics_mobile	1.1.0 – 1.1.22	—

CWE-326