CVE-2025-36411: Multiple vulnerabilities found in IBM ApplinX.
IBM ApplinX 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
Other sources
IBM ApplinX is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
— IBM
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-36411?
CVE-2025-36411 is considered a high severity vulnerability due to its potential for enabling cross-site request forgery attacks.
How do I fix CVE-2025-36411?
The recommended fix for CVE-2025-36411 is to update IBM ApplinX to version 11.1.0.8 or later following IBM's patch instructions.
Which versions of IBM ApplinX are affected by CVE-2025-36411?
CVE-2025-36411 affects all versions of IBM ApplinX up to and including version 11.1.
What types of attacks can CVE-2025-36411 enable?
CVE-2025-36411 enables cross-site request forgery attacks, which can allow unauthorized actions on behalf of trusted users.
Is there a specific IBM resource for CVE-2025-36411?
Yes, IBM provides a support page specifically addressing CVE-2025-36411 and its remediation.