CVE-2025-36094

EUVD-2025-206801
IBM Cloud Pak for Business Automation 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005, and 24.0.0 through 24.0.0 Interim Fix 007 could allow an authenticated user to cause a denial of service or corrupt existing data due to the improper validation of input length.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.4 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Affected Products (NVD)
VendorProductVersion
ibmcloud_pak_for_business_automation
24.0.0
ibmcloud_pak_for_business_automation
24.0.0:interim_fix_001
ibmcloud_pak_for_business_automation
24.0.0:interim_fix_002
ibmcloud_pak_for_business_automation
24.0.1
ibmcloud_pak_for_business_automation
24.0.1:interim_fix_001
ibmcloud_pak_for_business_automation
24.0.1:interim_fix_002
ibmcloud_pak_for_business_automation
24.0.1:interim_fix_004
ibmcloud_pak_for_business_automation
24.0.1:interim_fix_005
ibmcloud_pak_for_business_automation
25.0.0
ibmcloud_pak_for_business_automation
25.0.0:interim_fix_001
ibmcloud_pak_for_business_automation
25.0.0:interim_fix_002
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.ibm.com/support/pages/node/7259318