CVE-2025-36023: IBM Cloud Pak For Business Automation

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

IBM Cloud Pak for Business Automation 24.0.0 through 24.0.0 IF005 and 24.0.1 through 24.0.1 IF002 could allow an authenticated user to view sensitive user and system information due to an indirect object reference through a user-controlled key.

Affected products

• IBM Cloud Pak For Business Automation: version 24.0.0 only; version 24.0.1 only

Published 2025-08-08. Last modified 2026-06-17.