IBM Integrated Analytics System vulnerabilities

3 CVEs affecting IBM Integrated Analytics System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-36290, published 2026-08-28.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-36174, published 2025-08-24. High severity, CVSS 8.0. EPSS: 0.4% chance of exploitation in the next 30 days. IBM Integrated Analytics System 1.0.0.0 through 1.0.30.0 could allow an authenticated user to upload a file with dangerous types that could be executed by another user if opened.
CVE-2025-36271, published 2026-08-28. Medium severity, CVSS 5.9. EPSS: 0.2% chance of exploitation in the next 30 days. IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
CVE-2025-36290, published 2026-08-28. Medium severity, CVSS 5.9. EPSS: 0.2% chance of exploitation in the next 30 days. IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man…