IBM ApplinX 11.1 Server Architecture Info Disclosure
CVE-2025-36419 Published on January 20, 2026

Multiple vulnerabilities found in IBM ApplinX.
IBM ApplinX 11.1 could disclose sensitive information about server architecture that could aid in further attacks against the system.

Vendor Advisory NVD

Vulnerability Analysis

CVE-2025-36419 can be exploited with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a small impact on confidentiality, a small impact on integrity and availability.

Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
LOW
Integrity Impact:
NONE
Availability Impact:
NONE

Weakness Type

Server-generated Error Message Containing Sensitive Information

Certain conditions, such as network failure, will cause a server error message to be displayed. While error messages in and of themselves are not dangerous, per se, it is what an attacker can glean from them that might cause eventual problems.


Products Associated with CVE-2025-36419

Want to know whenever a new CVE is published for IBM Applinx? stack.watch will email you.

 

Affected Versions

IBM ApplinX Version 11.1 is affected by CVE-2025-36419

Exploit Probability

EPSS
0.04%
Percentile
10.82%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.