CVE-2025-36093
security vulnerabilities are addressed with IBM Business Automation Insights iFixes for October 2025.
- State
- Published
- Severity
- 4.8 Medium
- Published
- Nov 3, 2025
- Updated
- Nov 3, 2025
- Reserved
- Apr 15, 2025
Description
IBM Cloud Pak For Business Automation 25.0.0, 24.0.1, and 24.0.0 could allow an attacker to access unauthorized content or perform unauthorized actions using man in the middle techniques due to improper access controls.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 4.8 Medium | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N | ibm |
Weaknesses
- CWE-602 Client-Side Enforcement of Server-Side Security
Affected Products
| Product | Versions |
|---|---|
Cloud Pak For Business AutomationIBM |
|
References
- https://www.ibm.com/support/pages/node/7249999vendor-advisorypatch
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.