CVE-2025-36091

—

CVSS 3.1

4.3 medium

EPSS

<1%p26

Published

Nov 3, 2025 (Nov 3, 2025)

Modified

Jun 17, 2026

Description

IBM Cloud Pak For Business Automation 25.0.0, 24.0.1, and 24.0.0 could allow an authenticated user to cause dashboards to become inaccessible to legitimate users due to invalid ownership assignment.

Vendors: ibm
Products: cloud pak for business automation
Weakness: CWE-283
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.