CVE-2025-0895

EPSS 0.02%
Published 02.03.2025 16:15:35
Last modified 31.07.2025 17:43:29
Source psirt@us.ibm.com
Teams watchlist Login
Open Login

IBM Cognos Analytics Mobile 1.1 for Android could allow a user with physical access to the device, to obtain sensitive information from debugging code log messages.

Affected products Warnungen 0 Metrics 2 CWE 1 References 4

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD

This information is available to logged-in users.

Data is provided by the National Vulnerability Database (NVD)

Ibm ≫ Cognos Analytics Mobile SwPlatformandroid Version >= 1.1.0 < 1.1.21

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.02%	0.052

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
psirt@us.ibm.com	2.4	0.9	1.4	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-215 Insertion of Sensitive Information Into Debugging Code

The product inserts sensitive information into debugging code, which could expose this information if the debugging code is not disabled in production.

https://www.ibm.com/support/pages/node/7184430

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2025-0895

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-0895

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-0895

EUVD