CVE-2025-36092
Unknown
Unknown - Not Provided
BaseFortify
Publication date: 2025-11-03
Last updated on: 2025-11-05
Assigner: IBM Corporation
Description
Description
IBM Cloud Pak For Business Automation 25.0.0, 24.0.1, and 24.0.0 could allow an authenticated user to cause a denial of service due to the improper validation of input length.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| ibm | cloud_pak_for_business_automation | 24.0.0 |
| ibm | cloud_pak_for_business_automation | 24.0.0 |
| ibm | cloud_pak_for_business_automation | 24.0.0 |
| ibm | cloud_pak_for_business_automation | 24.0.0 |
| ibm | cloud_pak_for_business_automation | 24.0.0 |
| ibm | cloud_pak_for_business_automation | 24.0.1 |
| ibm | cloud_pak_for_business_automation | 24.0.1 |
| ibm | cloud_pak_for_business_automation | 24.0.1 |
| ibm | cloud_pak_for_business_automation | 24.0.1 |
| ibm | cloud_pak_for_business_automation | 25.0.0 |
| ibm | cloud_pak_for_business_automation | 25.0.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-1284 | The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties. |