CVE-2025-36437

CWE-2093 documents3 sources
Severity
4.3MEDIUM
EPSS
0.0%
top 85.49%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Planning Analytics LocalIBM IBM Planning Analytics Local
Timeline
PublishedDec 9
Latest updateDec 10

Description

IBM Planning Analytics Local 2.1.0 - 2.1.15 could disclose sensitive information about server architecture that could aid in further attacks against the system.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

▶NVDibm/planning_analytics_local2.1.0 — 2.1.16
▶CVEListV5ibm/ibm_planning_analytics_local2.1.0 — 2.1.15

🔴Vulnerability Details

2
GHSA
GHSA-fxxp-hvhr-hwpp: IBM Planning Analytics Local 2↗2025-12-10
▶
CVEList
IBM Planning Analytics Local is vulnerable to disclosing sensitive information↗2025-12-09
▶