CVE-2025-36174

creationtimestamp| type| source ---|---|--- 2025-08-24 04:28:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lx4njxkzaj2o 2025-08-24 04:31:50+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lx4npgzfse2j...

CVE-2025-36174

CVE-2025-36174 affects IBM Integrated Analytics System (IIAS) versions 1.0.0.0 through 1.0.30.0. A vulnerability in the file-upload feature allows an authenticated user to upload files with dangerous types, which could be executed by another user when opened. Root cause identified as unrestricted...

Security Bulletin: Vulnerability Malicious File Upload affects IBM Integrated Analytics System

Summary The file upload functionality in IIAS has been enhanced to enforce stricter validation across all supported file types. Extension check were implemented to ensure uploaded files match their expected format and content. This prevents the upload of malicious or improperly formatted files an...