Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-36023

No fix known EPSS <1%CVSS 6.5

IBM Cloud Pak for Business Automation 24.0.0 through 24.0.0 IF005 and 24.0.1 through 24.0.1 IF002 could allow an authenticated user to view sensitive user and system information due to an indirect object reference through a user-controlled key.

Published 2025-08-08 · CVE record · OSV

Products: IBM Cloud Pak for Business Automation