5.3
Medium
CVE-2025-36075 IBM Safer Payments could allow an authenticated user to obtain sensitive information
Description
IBM Safer Payments 6.4.0.00 through 6.4.2.11, 6.5.0.00 through 6.5.0.09, 6.6.0.00 through 6.6.0.07, 6.7.0.00 through 6.7.0.03, and 6.8.0.00 could allow an authenticated user to obtain sensitive information, caused by improper user input validation. By using a set of API requests the user could exploit this vulnerability to decrypt sensitive information.
CVSS 3.1 detail
Vector CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:NExploitable remotely over the network, with an ordinary account and without any user action; an attacker can seriously compromise confidentiality, integrity or availability.
- Attack vector
- Network
- Attack complexity
- High
- Privileges required
- Low
- Interaction
- None
- Scope
- Unchanged
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Safer Payments | 6.8.0.00 | No fix stated |
| Safer Payments 6.7 | 6.7.0.00 → 6.7.0.03 | No fix stated |
| Safer Payments 6.6 | 6.6.0.00 → 6.6.0.07 | No fix stated |
| Safer Payments 6.5 | 6.5.0.00 → 6.5.0.09 | No fix stated |
| Safer Payments 6.4 | 6.4.0.00 → 6.4.2.11 | No fix stated |
Other CVEs of Safer Payments
The 5 CVEs of Safer Payments →
CVE-2024-45662
IBM Safer Payments 6.4.0.00 through 6.4.2.07, 6.5.0.00 through 6.5.0.05, and 6.6.0.00 through 6.6.0.03 could allow a…
7.5
High
CVE-2023-27557
IBM Counter Fraud Management for Safer Payments 6.1.0.00 through 6.1.1.02, 6.2.0.00 through 6.2.2.02, 6.3.0.00 through…
5.9
Medium
CVE-2020-4729
IBM Counter Fraud Management for Safer Payments 5.7.0.00 through 5.7.0.10, 6.0.0.00 through 6.0.0.07, 6.1.0.00 through…
5.3
Medium
CVE-2023-27556
IBM Counter Fraud Management for Safer Payments 6.1.0.00, 6.2.0.00, 6.3.0.00 through 6.3.1.03, 6.4.0.00 through 6.4.2.02…
6.5
Medium