BaseFortify

Publication date: 2026-01-20

Last updated on: 2026-01-26

Assigner: IBM Corporation

Description

IBM ApplinX 11.1 could allow an authenticated user to perform unauthorized administrative actions on the server due to server-side enforcement of client-side security.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-20

Last Modified

2026-01-26

Generated

2026-07-06

AI Q&A

2026-01-20

EPSS Evaluated

2026-07-05

NVD

CVE-2025-36410

EUVD

EUVD-2026-3380

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	applinx	11.1.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-602	The product is composed of a server that relies on the client to implement a mechanism that is intended to protect the server.

Attack-Flow Graph

Impact Analysis

The vulnerability could allow an authenticated user to escalate their privileges and perform administrative actions they are not authorized to do, potentially leading to unauthorized changes or control over the server.

Executive Summary

This vulnerability in IBM ApplinX 11.1 allows an authenticated user to perform unauthorized administrative actions on the server because the server relies on client-side security enforcement instead of properly enforcing security on the server side.

Hi! I’m here to help you understand CVE-2025-36410. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70