Stored Cross-Site Scripting in IBM Cloud Pak for Business Automation

CVE-2025-36436

What is CVE-2025-36436?

IBM Cloud Pak for Business Automation versions 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005, and 24.0.0 through 24.0.0 Interim Fix 007 are susceptible to a stored cross-site scripting vulnerability. This issue arises from an authenticated user’s ability to inject arbitrary JavaScript code into the Web UI, which could manipulate the application’s functionality. The potential result of this vulnerability includes unauthorized access to user credentials within a trusted session, posing a significant security risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References