PT-2025-30324 · Ibm+1 · Ibm Cognos Analytics Mobile+1

Published 2025-07-21 · Updated 2025-08-07 · CVE-2025-36106

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM Cognos Analytics Mobile (iOS) versions 1.1.0 through 1.1.22

Description The application uses a deprecated or misconfigured AFNetworking library at runtime, potentially allowing malicious actors to view and modify information transmitted to and from the application. This could lead to unauthorized access to confidential information on the device or network.

Recommendations Update to a version of IBM Cognos Analytics Mobile (iOS) greater than 1.1.22.

Fix

Inadequate Encryption Strength

Weakness Enumeration

CWE-326

Related Identifiers

CVE-2025-36106

Affected Products

Afnetworking

Ibm Cognos Analytics Mobile

References · 5

• https://osv.dev/vulnerability/CVE-2025-36106 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-36106 · Security Note
• https://ibm.com/support/pages/node/7239635 · Vendor Advisory, Patch
• https://twitter.com/CVEnew/status/1947369699303690462 · Twitter Post
• https://t.me/cveNotify/131181 · Telegram Post