CVE-2025-36093

MEDIUM

IBM Cloud Pak For Business Automation <25.0.0 - Info Disclosure

Title source: llm

Description

IBM Cloud Pak For Business Automation 25.0.0, 24.0.1, and 24.0.0 could allow an attacker to access unauthorized content or perform unauthorized actions using man in the middle techniques due to improper access controls.

References (1)

[Vendor Advisory] https://www.ibm.com/support/pages/node/7249999

Scores

CVSS v3 4.8

EPSS 0.0006

EPSS Percentile 17.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

Classification

CWE

CWE-602

Status published

Affected Products (11)

ibm/cloud_pak_for_business_automation

ibm/cloud_pak_for_business_automation

ibm/cloud_pak_for_business_automation

ibm/cloud_pak_for_business_automation

ibm/cloud_pak_for_business_automation

ibm/cloud_pak_for_business_automation

ibm/cloud_pak_for_business_automation

ibm/cloud_pak_for_business_automation

ibm/cloud_pak_for_business_automation

ibm/cloud_pak_for_business_automation

ibm/cloud_pak_for_business_automation

Timeline

Published Nov 03, 2025

Tracked Since Feb 18, 2026