Unrated severityNVD Advisory· Published Jun 21, 2025· Updated Aug 24, 2025
IBM Process Mining HTTP open redirect
CVE-2025-36016
Description
IBM Process Mining 2.0.1 IF001 and 2.0.1 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:ibm:process_mining:2.0.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ibm:process_mining:2.0.1:*:*:*:*:*:*:*range: 2.0.1
- (no CPE)range: <=2.0.1 IF001
Patches
Vulnerability mechanics
References
1- www.ibm.com/support/pages/node/7237502mitrevendor-advisorypatch
News mentions
0No linked articles in our index yet.