Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

IBM Cognos Analytics Mobile iOS Transmits Sensitive Data Unencrypted

CVE-2025-36107 · published 1 year ago
Summary

IBM Cognos Analytics Mobile on iOS devices may send sensitive information in plain text, potentially exposing it to interception by unauthorized parties. This could lead to sensitive data being accessed without permission. IBM recommends updating to a fixed version of the app to ensure secure data transmission.

What to do
  • Update ibm cognos_analytics_mobile to version 1.1.23 or later.
Affected software
VendorProductAffected versions
ibm cognos_analytics_mobile >= 1.1.0, < 1.1.23
cpe:2.3:a:ibm:cognos_analytics_mobile:*:*:*:*:*:iphone_os:*:*
Original advisory text
IBM Cognos Analytics Mobile (iOS) 1.1.0 through 1.1.22 could allow malicious actors to obtain sensitive information due to the cleartext transmission of data.
IBM Cognos Analytics Mobile (iOS) 1.1.0 through 1.1.22 could allow malicious actors to obtain sensitive information due to the cleartext transmission of data.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
7.5 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-319Cleartext Transmission of Sensitive Information
Timeline
Published21 Jul 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-36107 · NVD
Track software like this
Free during beta