VulnSocial

CVE-2025-36094Disclosure(ibm / cloud_pak_for_business_automation)

LOWCVSS 8.1 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch ibm cloud_pak_for_business_automation systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

IBM Cloud Pak for Business Automation 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005, and 24.0.0 through 24.0.0 Interim Fix 007 could allow an authenticated user to cause a denial of service or corrupt existing data due to the improper validation of input length.

ibm CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-1284

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • cloud_pak_for_business_automation

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 2 total mentions across 1 day

Affected systems

Vendors
ibm
Products
cloud_pak_for_business_automation

3 versions affected across 1 product

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-02-04: 2Patch / Workaround · 2026-02-04: 1Technical Details · 2026-02-04: 102-04
Signal classification2 categories
Disclosure
150.0%
Patch
150.0%
Referenced assets2 URLs
Full discourse2 posts
  • CVE@CVEnew
    Patch

    CVE-2025-36094 IBM Cloud Pak for Business Automation 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005, and 24.0.0 through 24.0.0 Interim Fix 007 could al… https://www.cve.org/CVERecord?id=CVE-2025-36094

    Post summary

    The advisory identifies interim fixes for CVE‑2025‑36094 across multiple IBM Cloud Pak for Business Automation releases, but it does not provide technical details or evidence of exploitation.

    00010132
    56.5K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2025-36094 IBM Cloud Pak for Business Automation Denial of Service via Input Validation Vulnerability https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-36094

    Post summary

    The entry announces CVE‑2025‑36094 as a Denial‑of‑Service vulnerability in IBM Cloud Pak for Business Automation, with no PoC, exploit, or patch details provided.

    0000068
    4.0K followersView on X
CPE platform detail11 entries

11 of 11 entries

PartVendorProductVersionTarget SWTarget HW
Appibmcloud_pak_for_business_automation24.0.0--
Appibmcloud_pak_for_business_automation24.0.0--
Appibmcloud_pak_for_business_automation24.0.0--
Appibmcloud_pak_for_business_automation24.0.1--
Appibmcloud_pak_for_business_automation24.0.1--
Appibmcloud_pak_for_business_automation24.0.1--
Appibmcloud_pak_for_business_automation24.0.1--
Appibmcloud_pak_for_business_automation24.0.1--
Appibmcloud_pak_for_business_automation25.0.0--
Appibmcloud_pak_for_business_automation25.0.0--
Appibmcloud_pak_for_business_automation25.0.0--

Explore more

Back to dashboardibm CVEscloud_pak_for_business_automation vulnerabilities