VulnSocial

CVE-2025-36436Patch(ibm / cloud_pak_for_business_automation)

LOWCVSS 5.4 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch ibm cloud_pak_for_business_automation systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

IBM Cloud Pak for Business Automation 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005, and 24.0.0 through 24.0.0 Interim Fix 007  is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

ibm CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • cloud_pak_for_business_automation

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
ibm
Products
cloud_pak_for_business_automation

3 versions affected across 1 product

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-02-02: 1Patch / Workaround · 2026-02-02: 102-02
Signal classification1 categories
Patch
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • CVE@CVEnew
    Patch

    CVE-2025-36436 IBM Cloud Pak for Business Automation 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005, and 24.0.0 through 24.0.0 Interim Fix 007  is vuln… https://www.cve.org/CVERecord?id=CVE-2025-36436

    Post summary

    The post notes that CVE-2025-36436 affects IBM Cloud Pak for Business Automation and lists interim fixes, but it gives no technical details or evidence of exploitation.

    00000142
    56.5K followersView on X
CPE platform detail16 entries

16 of 16 entries

PartVendorProductVersionTarget SWTarget HW
Appibmcloud_pak_for_business_automation24.0.0--
Appibmcloud_pak_for_business_automation24.0.0--
Appibmcloud_pak_for_business_automation24.0.0--
Appibmcloud_pak_for_business_automation24.0.0--
Appibmcloud_pak_for_business_automation24.0.0--
Appibmcloud_pak_for_business_automation24.0.0--
Appibmcloud_pak_for_business_automation24.0.0--
Appibmcloud_pak_for_business_automation24.0.0--
Appibmcloud_pak_for_business_automation24.0.1--
Appibmcloud_pak_for_business_automation24.0.1--
Appibmcloud_pak_for_business_automation24.0.1--
Appibmcloud_pak_for_business_automation24.0.1--
Appibmcloud_pak_for_business_automation24.0.1--
Appibmcloud_pak_for_business_automation25.0.0--
Appibmcloud_pak_for_business_automation25.0.0--
Appibmcloud_pak_for_business_automation25.0.0--

Explore more

Back to dashboardibm CVEscloud_pak_for_business_automation vulnerabilities