CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.4. It may be remotely exploitable.
CVE
CVE-2025-36397
Severity
MEDIUM
CVSS
5.4
EPSS
0.16%
Original NVD Description
IBM Application Gateway 23.10 through 25.09 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.
Related CVEs
Other vulnerabilities affecting the same vendor(s)