CVE-2025-36023

6.5 mediumEPSS 0.3%

Medium (6.5) in ibm cloud pak for business automation. EPSS 0.3% chance of exploitation in the next 30 days.

IBM Cloud Pak for Business Automation 24.0.0 through 24.0.0 IF005 and 24.0.1 through 24.0.1 IF002 could allow an authenticated user to view sensitive user and system information due to an indirect object reference through a user-controlled key.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 21% of CVEs (scores of 2026-10-31)
CWE: CWE-639
Published: 2025-08-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:cloud_pak_for_business_automation

References

https://www.ibm.com/support/pages/node/7241570

Check your stack JSON