CVE-2025-36091

CWE-2833 documents3 sources
Severity
4.3MEDIUM
EPSS
0.0%
top 89.32%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Cloud PAK FOR Business Automation
Timeline
PublishedNov 3

Description

IBM Cloud Pak For Business Automation 25.0.0, 24.0.1, and 24.0.0 could allow an authenticated user to cause dashboards to become inaccessible to legitimate users due to invalid ownership assignment.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:LExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5ibm/cloud_pak_for_business_automation24.0.0, 24.0.1, 25.0.0+2
▶NVDibm/cloud_pak24.0.0, 24.0.1, 25.0.0+2

🔴Vulnerability Details

2
GHSA
GHSA-vcg9-56x3-3qqc: IBM Cloud Pak For Business Automation 25↗2025-11-03
▶
CVEList
IBM Business Automation Insights unverified ownership↗2025-11-03
▶