VULNERABILITY INTELLIGENCE
CVE-2025-36162
CVSS score4.3 MEDIUM
EPSS probability0.24%
CISA KEVNot currently listed
Published2025-09-02
Last modified2026-09-30
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Description
IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) 8.1 before 8.1.2.2 could allow an authenticated user to obtain sensitive information about configuration on the system.
Weakness classification
- CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Primary references
- psirt@us.ibm.com — Vendor Advisory