Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-36075 EUVD-2025-211279GHSA-q899-2rh8-x7xm

IBM Safer Payments could allow an authenticated user to obtain sensitive information

Published Nov 8, 2026 · Updated Nov 9, 2026 · Assigned by ibm

Description

IBM Safer Payments 6.4.0.00 through 6.4.2.11, 6.5.0.00 through 6.5.0.09, 6.6.0.00 through 6.6.0.07, 6.7.0.00 through 6.7.0.03, and 6.8.0.00 could allow an authenticated user to obtain sensitive information, caused by improper user input validation. By using a set of API requests the user could exploit this vulnerability to decrypt sensitive information.

Affected products

VendorProductAffectedFixed
IBM Safer Payments 6.4.0.00 – ≤ 6.4.2.11, 6.5.0.00 – ≤ 6.5.0.09, 6.6.0.00 – ≤ 6.6.0.07, 6.7.0.00 – ≤ 6.7.0.03, 6.8.0.00 —

References