CVE-2025-36094

Published: Feb 3, 2026Modified: Jun 17, 2026

8.1

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Exploitability: 2.8 / Impact: 5.2

Source: NVD

Description

IBM Cloud Pak for Business Automation 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005, and 24.0.0 through 24.0.0 Interim Fix 007 could allow an authenticated user to cause a denial of service or corrupt existing data due to the improper validation of input length.

Affected (11)

Products: Ibm: Cloud Pak For Business Automation

Ibm

1 product

Cloud Pak For Business Automation

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Ibm Cloud Pak For Business Automation	Version 24.0.0
Ibm Cloud Pak For Business Automation	Version 24.0.0 interim_fix_001
Ibm Cloud Pak For Business Automation	Version 24.0.0 interim_fix_002
Ibm Cloud Pak For Business Automation	Version 24.0.1
Ibm Cloud Pak For Business Automation	Version 24.0.1 interim_fix_001
Ibm Cloud Pak For Business Automation	Version 24.0.1 interim_fix_002
Ibm Cloud Pak For Business Automation	Version 24.0.1 interim_fix_004
Ibm Cloud Pak For Business Automation	Version 24.0.1 interim_fix_005
Ibm Cloud Pak For Business Automation	Version 25.0.0
Ibm Cloud Pak For Business Automation	Version 25.0.0 interim_fix_001
Ibm Cloud Pak For Business Automation	Version 25.0.0 interim_fix_002

Related CWEs

CWE-1284

Improper Validation of Specified Quantity in Input

The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.

References (1)

https://www.ibm.com/support/pages/node/7259318

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.