CVE-2025-36057

4.6 mediumEPSS 0.2%

Medium (4.6) in ibm cognos analytics mobile. EPSS 0.2% chance of exploitation in the next 30 days.

IBM Cognos Analytics Mobile (iOS) 1.1.0 through 1.1.22 is vulnerable to authentication bypass by using the Local Authentication Framework library which is not needed as biometric authentication is not used in the application.

Severity

CVSS 3.1

4.6 medium

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 11% of CVEs (scores of 2026-10-31)
CWE: CWE-299
Published: 2025-07-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:cognos_analytics_mobile

References

https://www.ibm.com/support/pages/node/7239635

Check your stack JSON