CVE-2025-36016 - CVE House
Back to Database
Status published Medium CVE-2025-36016

IBM Process Mining HTTP open redirect

Vulnerability Description

IBM Process Mining 2.0.1 IF001 and 2.0.1 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-36016

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

Process Mining
Vulnerable Versions:
2.0.1, 2.0.1 IF001

Timeline

Official Publish: June 21st, 2025
Last Modified: August 24th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N

Weaknesses (CWE)