CVE-2025-36336 is a vulnerability in IBM watsonx.data intelligence versions 5.2.0, 5.2.1, 5.2.2, and 5.3.0 where sensitive information is transmitted in clear text. This cleartext transmission could be exploited by attackers performing man-in-the-middle attacks to obtain sensitive data. The vulnerability is identified as CWE-319. No official remediation or patch information is currently provided by IBM, and no known exploits are reported in the wild.

The vulnerability allows an attacker with network access to intercept sensitive information transmitted by the affected versions of IBM watsonx.data intelligence. The confidentiality of the data is compromised, but integrity and availability are not impacted. The CVSS score of 5.9 reflects a medium impact primarily due to the confidentiality loss.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround is documented, users should monitor IBM advisories for updates. Until a patch is available, minimizing exposure of network traffic or using secure network channels (e.g., VPN, TLS proxies) may reduce risk but are not official mitigations.