PT-2026-5897 · Ibm · Ibm Cloud Pak For Business Automation

Published 2026-02-03 · Updated 2026-02-25 · CVE-2025-36094

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Cloud Pak for Business Automation versions 25.0.0 through 25.0.0 Interim Fix 002 IBM Cloud Pak for Business Automation versions 24.0.1 through 24.0.1 Interim Fix 005 IBM Cloud Pak for Business Automation versions 24.0.0 through 24.0.0 Interim Fix 007

Description The software contains an issue where improper validation of input length can lead to a denial of service or data corruption. This affects authenticated users.

Recommendations Update IBM Cloud Pak for Business Automation to a version beyond 25.0.0 Interim Fix 002. Update IBM Cloud Pak for Business Automation to a version beyond 24.0.1 Interim Fix 005. Update IBM Cloud Pak for Business Automation to a version beyond 24.0.0 Interim Fix 007.

Fix

DoS

Weakness Enumeration

CWE-1284

Related Identifiers

CVE-2025-36094

Affected Products

Ibm Cloud Pak For Business Automation

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-36094 · Security Note
• https://osv.dev/vulnerability/CVE-2025-36094 · Vendor Advisory
• https://ibm.com/support/pages/node/7259318 · Patch, Vendor Advisory
• https://t.me/cveNotify/153209 · Telegram Post
• https://t.me/cveNotify/150807 · Telegram Post
• https://t.me/CVEtracker/43671 · Telegram Post
• https://twitter.com/CVEnew/status/2018913240814624919 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2018863094479417402 · Twitter Post