CVE-2025-36090: IBM Analytics Content Hub

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 could allow a remote attacker to obtain information about the application framework which could be used in reconnaissance to gather information for future attacks from a detailed technical error message.

Affected products

• IBM Analytics Content Hub: from 2.0, before 2.4 (fixed in 2.4)

Published 2025-07-10. Last modified 2026-06-17.