# CVE-2025-36437: IBM Planning Analytics Local 2.1.0 - 2.1.15 could disclose sensitive information about server architecture that could…

Source: https://junglewise.ai/threats/cve-2025-36437-ibm-planning-analytics-local-2-1-0-2-1-15-could-disclose  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-12-09  
License: CC BY 4.0 with a link back

CVE-2025-36437 · Severity: medium · CVSS 4.3 · Published 2025-12-09

IBM Planning Analytics Local 2.1.0 - 2.1.15 could disclose sensitive information about server architecture that could aid in further attacks against the system.

Technologies: [IBM Planning Analytics Local](https://junglewise.ai/threats/technologies/planning-analytics-local). Vendors: [IBM](https://junglewise.ai/threats/vendors/ibm).

## Quick answers

**Is CVE-2025-36437 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-36437 being exploited in the wild.

**How severe is CVE-2025-36437?** Medium severity, with a CVSS score of 4.3, published 9 December 2025.

**Which products and versions are affected?** IBM Planning Analytics Local. The advisory does not name versions.

**Is there a fix for CVE-2025-36437?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2025-36437?** Check whether you run IBM Planning Analytics Local. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- IBM Planning Analytics Local

## Related threats

- [IBM Planning Analytics Local open redirect in Workspace](https://junglewise.ai/threats/cve-2026-10545-ibm-planning-analytics-local-open-redirect-in-workspace)
- [IBM Planning Analytics Local 2.1.0 through 2.1.14 could allow a remote authenticated user to traverse directories on…](https://junglewise.ai/threats/cve-2025-36357-ibm-planning-analytics-local-2-1-0-through-2-1-14-could-allow-a)
- [IBM Planning Analytics Local 2.1.0 through 2.1.14 stores sensitive information in source code could be used in further…](https://junglewise.ai/threats/cve-2025-36299-ibm-planning-analytics-local-2-1-0-through-2-1-14-stores)