PT-2026-5897 · Ibm · Ibm Cloud Pak For Business Automation

CVE-2025-36094 · Publicado 2026-02-03 · Atualizado 2026-02-25

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Cloud Pak for Business Automation versions 25.0.0 through 25.0.0 Interim Fix 002 IBM Cloud Pak for Business Automation versions 24.0.1 through 24.0.1 Interim Fix 005 IBM Cloud Pak for Business Automation versions 24.0.0 through 24.0.0 Interim Fix 007

Description The software contains an issue where improper validation of input length can lead to a denial of service or data corruption. This affects authenticated users.

Recommendations Update IBM Cloud Pak for Business Automation to a version beyond 25.0.0 Interim Fix 002. Update IBM Cloud Pak for Business Automation to a version beyond 24.0.1 Interim Fix 005. Update IBM Cloud Pak for Business Automation to a version beyond 24.0.0 Interim Fix 007.

Correção

DoS

Enumeração de Fraquezas

CWE-1284

Identificadores relacionados

CVE-2025-36094

Produtos afetados

Ibm Cloud Pak For Business Automation

Referências · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-36094 · Nota de Segurança
• https://ibm.com/support/pages/node/7259318 · Correção, Aviso do Fabricante
• https://t.me/cveNotify/153209 · Publicação no Telegram
• https://t.me/cveNotify/150807 · Publicação no Telegram
• https://t.me/CVEtracker/43671 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2025-36094 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2018913240814624919 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/2018863094479417402 · Publicação no Twitter