Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: IBM Cloud Pak For Business Automation — ibm.com/support/pages/node/7249999 Clear all filters
TI-2025-24684 CVE-2025-36093 · GHSA-jww4-hp22-h876

security vulnerabilities are addressed with IBM Business Automation Insights iFixes for October 2025.

Priority LOW 32

IBM Cloud Pak For Business Automation 25.0.0, 24.0.1, and 24.0.0 could allow an attacker to access unauthorized content or perform unauthorized actions using man in the middle techniques due to improper access controls.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00266 Published 2025-11-03 No fix listed CWE-602
TI-2025-24683 CVE-2025-36092 · GHSA-p635-chcg-qxpc

IBM Business Automation Insights improper input validation

Priority LOW 29

IBM Cloud Pak For Business Automation 25.0.0, 24.0.1, and 24.0.0 could allow an authenticated user to cause a denial of service due to the improper validation of input length.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00452 Published 2025-11-03 No fix listed CWE-1284
TI-2025-24682 CVE-2025-36091 · GHSA-vcg9-56x3-3qqc

IBM Business Automation Insights unverified ownership

Priority LOW 20

IBM Cloud Pak For Business Automation 25.0.0, 24.0.1, and 24.0.0 could allow an authenticated user to cause dashboards to become inaccessible to legitimate users due to invalid ownership assignment.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00355 Published 2025-11-03 No fix listed CWE-283