CVE-2025-36091CWE-283

CVE-2025-36091

Medium · published November 3, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
28.0
In the wild
Unconfirmed
What it is

IBM Cloud Pak For Business Automation 25.0.0, 24.0.1, and 24.0.0 could allow an authenticated user to cause dashboards to become inaccessible to legitimate users due to invalid ownership assignment.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00355 · 28.0th percentile
Weakness
CWE-283 · Unverified Ownership
Published
2025-11-03T21:15Z
Affected products (11)
ProductVersionsFixed in
ibm/cloud_pak_for_business_automationall versions—
ibm/cloud_pak_for_business_automationall versions—
ibm/cloud_pak_for_business_automationall versions—
ibm/cloud_pak_for_business_automationall versions—
ibm/cloud_pak_for_business_automationall versions—
ibm/cloud_pak_for_business_automationall versions—
ibm/cloud_pak_for_business_automationall versions—
ibm/cloud_pak_for_business_automationall versions—
ibm/cloud_pak_for_business_automationall versions—
ibm/cloud_pak_for_business_automationall versions—
ibm/cloud_pak_for_business_automationall versions—
References (1)
https://www.ibm.com/support/pages/node/7249999 · [email protected]
EPSS history
Timeline
  • 03 NOV 15:14Z
    IBM Business Automation Insights unverified ownership
    cvelistv5