PT-2025-44780 · Ibm · Ibm Cloud Pak For Business Automation

Published 2025-11-03 · Updated 2025-11-03 · CVE-2025-36093

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions IBM Cloud Pak For Business Automation versions 25.0.0, 24.0.1, and 24.0.0

Description IBM Cloud Pak For Business Automation may allow an attacker to access unauthorized content or perform unauthorized actions through man-in-the-middle techniques due to improper access controls.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-602

Related Identifiers

CVE-2025-36093

Affected Products

Ibm Cloud Pak For Business Automation

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-36093 · Security Note
• https://osv.dev/vulnerability/CVE-2025-36093 · Vendor Advisory
• https://ibm.com/support/pages/node/7249999 · Patch, Vendor Advisory
• https://t.me/CVEtracker/36424 · Telegram Post