CVE-2025-36094CWE-1284

Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for January 2026.

Medium · published February 3, 2026

CVSS v3.1
5.4
EPSS
0%
Percentile
15.4
In the wild
Unconfirmed
What it is

IBM Cloud Pak for Business Automation 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005, and 24.0.0 through 24.0.0 Interim Fix 007 could allow an authenticated user to cause a denial of service or corrupt existing data due to the improper validation of input length.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00250 · 15.4th percentile
Weakness
CWE-1284 · Improper Validation of Specified Quantity in Input
Published
2026-02-03T22:06Z
EPSS history
Timeline
  • 03 FEB 22:06Z
    Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for January 2026.
    cvelistv5