What is the CVSS score of CVE-2025-36419?

CVE-2025-36419 has a CVSS 3.1 base score of 5.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N. EPSS exploitation probability: 0.0%.

Which versions of Applinx are affected by CVE-2025-36419?

CVE-2025-36419 presents moderate security risk rated CVSS 5.3. Exploitation could compromise the security of affected deployments.

How to fix or mitigate CVE-2025-36419?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Applinx CVE-2025-36419

MEDIUM

Server-generated Error Message Containing Sensitive Information (CWE-550)

2026-01-20 psirt@us.ibm.com

IBM Applinx

5.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.3 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Jan 20, 2026 - 16:16 nvd

MEDIUM 5.3

DescriptionCVE.org

IBM ApplinX 11.1 could disclose sensitive information about server architecture that could aid in further attacks against the system.

AnalysisAI

IBM ApplinX 11.1 could disclose sensitive information about server architecture that could aid in further attacks against the system. [CVSS 5.3 MEDIUM]

Technical ContextAI

Affects Applinx. IBM ApplinX 11.1 could disclose sensitive information about server architecture that could aid in further attacks against the system.

RemediationAI

Monitor vendor advisories for a patch. Restrict network access to the affected service where possible.

More in Applinx

View all

CVE-2025-36418 HIGH This Week

7.3 Jan 20

Applinx versions up to 11.1.0 is affected by improper verification of cryptographic signature (CVSS 7.3).

CVE-2024-49791 MEDIUM This Month

6.4 Feb 06

IBM ApplinX 11.1 is vulnerable to cross-site scripting. Rated medium severity (CVSS 6.4), this vulnerability is remotely

CVE-2025-36408 MEDIUM This Month

6.4 Jan 20

IBM ApplinX 11.1 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed

CVE-2024-49797 MEDIUM This Month

5.9 Feb 06

IBM ApplinX 11.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable

CVE-2024-49792 MEDIUM This Month

5.4 Feb 06

IBM ApplinX 11.1 is vulnerable to cross-site scripting. Rated medium severity (CVSS 5.4), this vulnerability is remotely

CVE-2024-49793 MEDIUM This Month

5.4 Feb 06

IBM ApplinX 11.1 is vulnerable to cross-site scripting. Rated medium severity (CVSS 5.4), this vulnerability is remotely

CVE-2024-49796 MEDIUM This Month

5.4 Feb 06

IBM ApplinX 11.1 could allow a remote attacker to hijack the clicking action of the victim. Rated medium severity (CVSS

CVE-2025-36409 MEDIUM This Month

5.4 Jan 20

IBM ApplinX 11.1 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitra

CVE-2024-49794 MEDIUM This Month

4.3 Feb 06

IBM ApplinX 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unau

CVE-2024-49795 MEDIUM This Month

4.3 Feb 06

IBM ApplinX 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unau

CVE-2024-49798 MEDIUM This Month

4.3 Feb 06

IBM ApplinX 11.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message i

CVE-2024-49800 MEDIUM This Month

4.3 Feb 06

IBM ApplinX 11.1 stores sensitive information in cleartext in memory that could be obtained by an authenticated user. Ra

Same weakness CWE-550 – Server-generated Error Message Containing Sensitive Information

View all

CVE-2023-40726 HIGH

8.8

CVE-2025-36419 vulnerability details – vuln.today

Back

Applinx CVE-2025-36419

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

More in Applinx

Same weakness CWE-550 – Server-generated Error Message Containing Sensitive Information

Share

External POC / Exploit Code