{"affected":[{"product":"Safer Payments","source":"CNA: ibm","vendor":"IBM","versions":[{"lessThanOrEqual":"6.4.2.11","status":"affected","version":"6.4.0.00","versionType":"semver"},{"lessThanOrEqual":"6.5.0.09","status":"affected","version":"6.5.0.00","versionType":"semver"},{"lessThanOrEqual":"6.6.0.07","status":"affected","version":"6.6.0.00","versionType":"semver"},{"lessThanOrEqual":"6.7.0.03","status":"affected","version":"6.7.0.00","versionType":"semver"},{"status":"affected","version":"6.8.0.00","versionType":"semver"}]}],"cveId":"CVE-2025-36075","cwes":["CWE-1287"],"description":"IBM Safer Payments 6.4.0.00 through 6.4.2.11, 6.5.0.00 through 6.5.0.09, 6.6.0.00 through 6.6.0.07, 6.7.0.00 through 6.7.0.03, and 6.8.0.00 could allow an authenticated user to obtain sensitive information, caused by improper user input validation. By using a set of API requests the user could exploit this vulnerability to decrypt sensitive information.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":5.3,"severity":"medium","source":"CNA: ibm","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},{"score":5.3,"severity":"medium","source":"NVD: psirt@us.ibm.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"}],"modifiedAt":1794154596050,"publishedAt":1794154021387,"references":[{"source":"CNA: ibm","tags":["vendor-advisory","patch"],"url":"https://www.ibm.com/support/pages/node/7293213"},{"source":"psirt@us.ibm.com","tags":[],"url":"https://www.ibm.com/support/pages/node/7293213"}],"remediation":[{"kind":"fix","source":"CNA: ibm","text":"Update IBM Safer Payments to version 6.4.2.12, 6.5.0.10, 6.6.0.08, 6.7.0.04, 6.8.0.01 or higher.\n\n\n\nRefer to the  IBM Safer Payments documentation https://www.ibm.com/docs/en/safer-payments  to download the updates."},{"kind":"fix","source":"CNA: ibm","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://www.ibm.com/support/pages/node/7293213"}],"revision":"90d64437ba3768400e629e5cfc440a7cebb9ff5b88bde8275490e2b8e960cd77","sources":[{"modifiedAt":1794154021387,"name":"CNA: ibm","retrievedAt":1794157702704,"url":"https://www.cve.org/CVERecord?id=CVE-2025-36075"},{"modifiedAt":1794154596050,"name":"NVD","retrievedAt":1794161782841,"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-36075"}],"ssvc":null,"status":"published","title":"IBM Safer Payments could allow an authenticated user to obtain sensitive information","updatedAt":1794161782841}