{"id":"CVE-2025-36075","kind":"vulnerability","aliases":["CVE-2025-36075"],"related":[],"title":"IBM Safer Payments: authenticated users can decrypt sensitive information via API requests","description":"IBM Safer Payments 6.4.0.00 through 6.4.2.11, 6.5.0.00 through 6.5.0.09, 6.6.0.00 through 6.6.0.07, 6.7.0.00 through 6.7.0.03, and 6.8.0.00 could allow an authenticated user to obtain sensitive information, caused by improper user input validation. By using a set of API requests the user could exploit this vulnerability to decrypt sensitive information.","summary":"IBM Safer Payments versions 6.4.0.00 through 6.8.0.00 fail to validate user input properly. An authenticated user can send a set of API requests to decrypt sensitive information.","severity":"medium","cvss":5.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ibm-safer-payments","payments","self-hosted","vendor"],"not_affected_if":["unaffected-version"],"how_to_check":"- Confirm whether IBM Safer Payments is deployed and check its version against the affected ranges: 6.4.0.00 through 6.4.2.11, 6.5.0.00 through 6.5.0.09, 6.6.0.00 through 6.6.0.07, 6.7.0.00 through 6.7.0.03, and 6.8.0.00.","fix":null,"status":"open","published_at":"2026-11-08T16:16:35+00:00","first_seen_at":"2026-11-08T16:18:33+00:00","triaged_at":"2026-11-08T16:18:59+00:00","updated_at":"2026-11-08T16:18:59+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-11-08T16:18:59Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"IBM Safer Payments: authenticated users can decrypt sensitive information via API requests","impact":"medium","summary":"IBM Safer Payments versions 6.4.0.00 through 6.8.0.00 fail to validate user input properly. An authenticated user can send a set of API requests to decrypt sensitive information.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["ibm-safer-payments","payments","self-hosted"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"authenticated user decrypts sensitive information through crafted API requests","analyst_note":"Find the fixed versions and any IBM security bulletin for CVE-2025-36075 to fill in fix and fix_status.","how_to_check":"- Confirm whether IBM Safer Payments is deployed and check its version against the affected ranges: 6.4.0.00 through 6.4.2.11, 6.5.0.00 through 6.5.0.09, 6.6.0.00 through 6.6.0.07, 6.7.0.00 through 6.7.0.03, and 6.8.0.00.","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["unaffected-version"],"who_is_affected":"Only deployments of IBM Safer Payments in the listed version ranges are exposed. The attacker needs a valid user account on the application, so teams that restrict accounts to trusted staff have less exposure. unknown whether specific configurations change exposure.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000749,"input_tokens":4648,"output_tokens":568,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2025':14A,17A '-36075':15A,18A '6.4.0.00':32B,58C '6.4.2.11':60C '6.5.0.00':61C '6.5.0.09':63C '6.6.0.00':64C '6.6.0.07':66C '6.7.0.00':67C '6.7.0.03':69C '6.8.0.00':34B,71C 'allow':73C 'api':11A,49B,92C 'authent':4A,42B,75C 'caus':81C 'could':72C,96C 'cve':13A,16A 'decrypt':7A,52B,101C 'exploit':97C 'fail':35B 'host':26B 'ibm':1A,20B,28B,55C 'ibm-safer-pay':19B 'improp':83C 'inform':9A,54B,80C,103C 'input':39B,85C 'obtain':78C 'payment':3A,22B,23B,30B,57C 'proper':40B 'request':12A,50B,93C 'safer':2A,21B,29B,56C 'self':25B 'self-host':24B 'send':45B 'sensit':8A,53B,79C,102C 'set':47B,90C 'use':88C 'user':5A,38B,43B,76C,84C,95C 'valid':37B,86C 'vendor':27B 'version':31B 'via':10A 'vulner':99C","nicknames":[],"mitigations":[],"who_affected":"Only deployments of IBM Safer Payments in the listed version ranges are exposed. The attacker needs a valid user account on the application, so teams that restrict accounts to trusted staff have less exposure. unknown whether specific configurations change exposure.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["ibmsaferpayments","medium","payments","selfhosted","vendor"],"campaign_type":null,"search_a":"'-2025':14A,17A '-36075':15A,18A 'api':11A 'authent':4A 'cve':13A,16A 'decrypt':7A 'ibm':1A 'inform':9A 'payment':3A 'request':12A 'safer':2A 'sensit':8A 'user':5A 'via':10A","search_b":"'6.4.0.00':32B '6.8.0.00':34B 'api':49B 'authent':42B 'decrypt':52B 'fail':35B 'host':26B 'ibm':20B,28B 'ibm-safer-pay':19B 'inform':54B 'input':39B 'payment':22B,23B,30B 'proper':40B 'request':50B 'safer':21B,29B 'self':25B 'self-host':24B 'send':45B 'sensit':53B 'set':47B 'user':38B,43B 'valid':37B 'vendor':27B 'version':31B","search_c":"'6.4.0.00':58C '6.4.2.11':60C '6.5.0.00':61C '6.5.0.09':63C '6.6.0.00':64C '6.6.0.07':66C '6.7.0.00':67C '6.7.0.03':69C '6.8.0.00':71C 'allow':73C 'api':92C 'authent':75C 'caus':81C 'could':72C,96C 'decrypt':101C 'exploit':97C 'ibm':55C 'improp':83C 'inform':80C,103C 'input':85C 'obtain':78C 'payment':57C 'request':93C 'safer':56C 'sensit':79C,102C 'set':90C 'use':88C 'user':76C,84C,95C 'valid':86C 'vulner':99C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-08T16:16:35+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss_by":"psirt@us.ibm.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2025-36075","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-36075","severity":null,"published_at":"2026-11-08T16:16:35+00:00","modified_at":"2026-11-08T16:16:36+00:00","first_seen_at":"2026-11-08T16:18:33+00:00","fetched_at":"2026-11-08T16:18:33+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}