Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2025-36094

Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for January 2026.

Description

IBM Cloud Pak for Business Automation 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005, and 24.0.0 through 24.0.0 Interim Fix 007 could allow an authenticated user to cause a denial of service or corrupt existing data due to the improper validation of input length.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM Cloud Pak for Business Automation

  • 25.0.0 to ≤ 25.0.0 Interim Fix 002affected
  • 24.0.1 to ≤ 24.0.1 Interim Fix 005affected
  • 24.0.0 to ≤ 24.0.0 Interim Fix 007affected

References