CVE-2025-36336 is a vulnerability in IBM watsonx.data intelligence versions 5.2.0, 5.2.1, 5.2.2, and 5.3.0 where sensitive information is transmitted in clear text. This cleartext transmission exposes the data to interception by attackers performing man-in-the-middle attacks. The vulnerability is categorized under CWE-319 (Cleartext Transmission of Sensitive Information). The CVSS v3.1 base score is 5.9, reflecting medium severity with network attack vector, high attack complexity, no privileges required, no user interaction, and high confidentiality impact but no integrity or availability impact. No vendor advisory or patch information is currently provided, and the product is not a cloud service, so remediation is not managed server-side by IBM.

The vulnerability allows an attacker with network access to intercept sensitive information transmitted in clear text by the affected IBM watsonx.data intelligence versions. This compromises confidentiality but does not affect integrity or availability of the system. Exploitation requires a man-in-the-middle position and is rated medium severity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, organizations should consider mitigating the risk by using secure network channels such as VPNs or TLS tunnels to protect data in transit. Monitor IBM advisories for updates on official patches or mitigations.