Improper Access Control in IBM Cloud Pak For Business Automation
CVE-2025-36093
Key Information:
- Vendor
IBM
- Vendor
- CVE Published:
- 3 November 2025
What is CVE-2025-36093?
IBM Cloud Pak For Business Automation versions 25.0.0, 24.0.1, and 24.0.0 are susceptible to unauthorized access threats due to inadequate access controls. This vulnerability enables attackers to leverage man-in-the-middle techniques, potentially allowing them to intercept communications and manipulate or access sensitive content and actions within the affected products. Organizations utilizing these versions should apply necessary security measures to mitigate potential risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Cloud Pak For Business Automation 25.0.0
Cloud Pak For Business Automation 24.0.1
Cloud Pak For Business Automation 24.0.0
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved