---
id: "CVE-2025-36075"
page: "https://infrastack.ai/live/CVE-2025-36075"
kind: "vulnerability"
aliases: ["CVE-2025-36075"]
title: "IBM Safer Payments: authenticated users can decrypt sensitive information via API requests"
severity: "medium"
cvss: 5.3
epss: null
exploited: false
status: "open"
category: "vendor"
products: []
ecosystems: []
tags: ["ibm-safer-payments", "payments", "self-hosted", "vendor"]
not_affected_if: ["unaffected-version"]
published_at: "2026-11-08T16:16:35+00:00"
first_seen_at: "2026-11-08T16:18:33+00:00"
updated_at: "2026-11-08T16:18:59+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-36075", "first_seen_at": "2026-11-08T16:18:33+00:00"}]
exploit_sources: []
---

# IBM Safer Payments: authenticated users can decrypt sensitive information via API requests

Link for people: https://infrastack.ai/live/CVE-2025-36075 (this .md is for agents)

IBM Safer Payments versions 6.4.0.00 through 6.8.0.00 fail to validate user input properly. An authenticated user can send a set of API requests to decrypt sensitive information.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Confirm whether IBM Safer Payments is deployed and check its version against the affected ranges: 6.4.0.00 through 6.4.2.11, 6.5.0.00 through 6.5.0.09, 6.6.0.00 through 6.6.0.07, 6.7.0.00 through 6.7.0.03, and 6.8.0.00.

## Timeline

- 2026-11-08T16:18:33+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2025-36075

## From the sources

IBM Safer Payments 6.4.0.00 through 6.4.2.11, 6.5.0.00 through 6.5.0.09, 6.6.0.00 through 6.6.0.07, 6.7.0.00 through 6.7.0.03, and 6.8.0.00 could allow an authenticated user to obtain sensitive information, caused by improper user input validation. By using a set of API requests the user could exploit this vulnerability to decrypt sensitive information.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_