CVE-2025-36328 is a vulnerability in IBM watsonx.data intelligence (versions 5.2.0, 5.2.1, 5.2.2, and 5.3.0) where detailed error messages disclosed in the browser can leak sensitive information. This information disclosure could potentially be leveraged by remote attackers to facilitate additional attacks against the affected system. The vulnerability is identified as CWE-209 (Generation of Error Message Containing Sensitive Information). No official remediation or patch information is provided in the available data.

The vulnerability allows remote attackers to obtain sensitive information through detailed error messages displayed in the browser. While it does not directly impact system integrity or availability, the information disclosure could assist attackers in crafting further attacks, increasing the risk to confidentiality.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor IBM advisories for updates. Until a fix is available, consider limiting exposure of detailed error messages to end users, for example by configuring error handling to avoid revealing sensitive details in browser responses.