CVE-2025-36091
IBM Business Automation Insights unverified ownership
- State
- Published
- Severity
- 4.3 Medium
- Published
- Nov 3, 2025
- Updated
- Nov 3, 2025
- Reserved
- Apr 15, 2025
Description
IBM Cloud Pak For Business Automation 25.0.0, 24.0.1, and 24.0.0 could allow an authenticated user to cause dashboards to become inaccessible to legitimate users due to invalid ownership assignment.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 4.3 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L | ibm |
Weaknesses
- CWE-283 Unverified Ownership
Affected Products
| Product | Versions |
|---|---|
Cloud Pak For Business AutomationIBM |
|
References
- https://www.ibm.com/support/pages/node/7249999vendor-advisorypatch
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.