BaseFortify

Publication date: 2026-09-18

Last updated on: 2026-09-18

Assigner: IBM Corporation

Description

IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 stores sensitive information in source code could be used by an authenticated user in further attacks against the system.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-18

Last Modified

2026-09-18

Generated

2026-09-20

EPSS Evaluated

N/A

NVD

CVE-2025-36076

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-540	Source code on a web server or repository often contains sensitive information and should generally not be accessible to users.

Attack-Flow Graph

AI Quick Actions have not been generated yet.

Hi! I’m here to help you understand CVE-2025-36076. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70