[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fPZx2uThFW_vpf8oOykp4K2JQehu3GbeaOPGY2o7jZLc":3,"g5a-risk:CVE-2025-36057":114},{"success":4,"data":5,"meta":111},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":29,"epssTimeSeries":40,"severity":42,"affectedProducts":43,"affectedProductsCount":49,"references":50,"referencesCount":49,"weaknesses":56,"weaknessesCount":49,"isActivelyExploited":65,"cisaInfo":29,"otxData":29,"relatedBlogPosts":66,"seoMetadata":67,"configurations":92,"relatedVendorCves":102,"notableEvents":103},"CVE-2025-36057","What is CVE-2025-36057?","IBM Cognos Analytics Mobile (iOS) 1.1.0 through 1.1.22 \n\nis vulnerable to authentication bypass by using the Local Authentication Framework library which is not needed as biometric authentication is not used in the application.","IBM Cognos Analytics Mobile (iOS) 1.1.0 through 1.1.22 is vulnerable to authentication bypass by using the Local Authentication Framework library which is no...","2025-07-21T19:15:28.84","2025-08-07T00:43:35.27",4.6,"CVSS:3.1\u002FAV:P\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":37,"CVSSMetricV2":38,"CVSSMetricV40":29},[16,32],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":30,"ImpactScore":31},"psirt@us.ibm.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":26,"AvailabilityImpact":24,"BaseScore":27,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"3.1","CVSS:3.1\u002FAV:P\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:N","PHYSICAL","LOW","NONE","UNCHANGED","HIGH",5.2,"MEDIUM",null,0.9,4.2,{"Source":33,"Type":34,"CVSSData":35,"ExploitabilityScore":30,"ImpactScore":36},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":24,"IntegrityImpact":26,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},3.6,[],[],0.0021,[41,39,39,39,39,39,39],0.00203,"Medium",[44],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"ibm","cognos_analytics_mobile","*","cpe:2.3:a:ibm:cognos_analytics_mobile:*:*:*:*:*:iphone_os:*:*",1,[51],{"url":52,"source":53,"tags":54},"https:\u002F\u002Fwww.ibm.com\u002Fsupport\u002Fpages\u002Fnode\u002F7239635","Ibm",[55],"Vendor Advisory",[57],{"id":58,"name":59,"description":60,"extendedDescription":61,"status":62,"abstraction":63,"structure":64},"CWE-299","Improper Check for Certificate Revocation","The product does not check or incorrectly checks the revocation status of a certificate, which may cause it to use a certificate that has been compromised.","An improper check for certificate revocation is a far more serious flaw than related certificate failures. This is because the use of any revoked certificate is almost certainly malicious. The most common reason for certificate revocation is compromise of the system in question, with the result that no legitimate servers will be using a revoked certificate, unless they are sorely out of sync.","Draft","Base","Simple",false,[],{"title":68,"metaDescription":69,"keywords":70,"canonicalUrl":71,"structuredData":72},"What is CVE-2025-36057? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2025-36057, a medium severity cyber security vulnerability from 2025. IBM Cognos Analytics Mobile (iOS) 1.1.0 through 1.1.22 is...","CVE-2025-36057, CVE-2025-36057 vulnerability, CVE-2025-36057 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, ibm security, cognos_analytics_mobile vulnerability","\u002Fwhat-is\u002Fcve-2025-36057",{"@context":73,"@type":74,"headline":68,"description":69,"datePublished":10,"dateModified":11,"author":75,"publisher":79,"about":83,"mainEntityOfPage":87,"articleSection":90,"keywords":91},"https:\u002F\u002Fschema.org","TechArticle",{"@type":76,"name":77,"url":78},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":76,"name":77,"url":78,"logo":80},{"@type":81,"url":82},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":84,"name":6,"description":85,"additionalType":86},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":88,"@id":89},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2025-36057","Cybersecurity","CVE-2025-36057, CVE-2025-36057 vulnerability, CVE-2025-36057 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[93],{"Operator":29,"Negate":29,"Nodes":94},[95],{"Operator":96,"Negate":65,"CPEMatch":97},"OR",[98],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":99,"VersionStartExcluding":29,"VersionStartIncluding":100,"VersionEndExcluding":101,"VersionEndIncluding":29},"DED20B11-A5FD-49F0-8E4C-1C84B352DCEA","1.1.0","1.1.23",[],[104],{"id":105,"eventType":106,"eventTime":107,"details":108,"label":109,"color":110},"3af152ee-f2b9-4ba8-a9e0-270718b8f4d4","NEW_NVD","2025-07-22T19:26:48.948851+00:00","New CVE added to NVD","Published to NVD","blue",{"lastModified":11,"cacheTime":112,"version":113},1793230278796,"2.0",{"score":115,"band":116,"action":117,"scoredAt":118},20,"Low","Monitor","2026-10-28T07:09:13.123646+00:00"]