VYPR
Unrated severityNVD Advisory· Published Jun 21, 2025· Updated Aug 24, 2025

IBM Process Mining HTTP open redirect

CVE-2025-36016

Description

IBM Process Mining 2.0.1 IF001 and 2.0.1 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • IBM/Process Miningcpe-rescue2 versions
    cpe:2.3:a:ibm:process_mining:2.0.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:process_mining:2.0.1:*:*:*:*:*:*:*range: 2.0.1
    • (no CPE)range: <=2.0.1 IF001

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.