CVE-2025-36016

Description

IBM Process Mining 2.0.1 IF001 and 2.0.1 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim.

PUBLISHED Reserved 2025-04-15 | Published 2025-06-21 | Updated 2025-08-24 | Assigner ibm

Problem types

CWE-601 URL Redirection to Untrusted Site ('Open Redirect')

Product status

References

www.ibm.com/support/pages/node/7237502 vendor-advisory patch

cve.org (CVE-2025-36016)

nvd.nist.gov (CVE-2025-36016)

Download JSON