# CVE-2025-36092: IBM Cloud Pak For Business Automation 25.0.0, 24.0.1, and 24.0.0 could allow an authenticated user to cause a denial…

Source: https://junglewise.ai/threats/cve-2025-36092-ibm-cloud-pak-for-business-automation-25-0-0-24-0-1-and-24-0-0  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-11-03  
License: CC BY 4.0 with a link back

CVE-2025-36092 · Severity: medium · CVSS 6.5 · Published 2025-11-03

IBM Cloud Pak For Business Automation 25.0.0, 24.0.1, and 24.0.0 could allow an authenticated user to cause a denial of service due to the improper validation of input length.

Technologies: [IBM Cloud Pak For Business Automation](https://junglewise.ai/threats/technologies/cloud-pak-for-business-automation). Vendors: [IBM](https://junglewise.ai/threats/vendors/ibm).

## Quick answers

**Is CVE-2025-36092 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-36092 being exploited in the wild.

**How severe is CVE-2025-36092?** Medium severity, with a CVSS score of 6.5, published 3 November 2025.

**Which products and versions are affected?** IBM Cloud Pak For Business Automation. The advisory does not name versions.

**Is there a fix for CVE-2025-36092?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2025-36092?** Check whether you run IBM Cloud Pak For Business Automation. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- IBM Cloud Pak For Business Automation

## Related threats

- [IBM Cloud Pak for Business Automation HTML injection](https://junglewise.ai/threats/cve-2026-12751-ibm-cloud-pak-for-business-automation-html-injection)
- [IBM Cloud Pak for Business Automation stored cross-site scripting](https://junglewise.ai/threats/cve-2026-12750-ibm-cloud-pak-for-business-automation-stored-cross-site-scripting)
- [IBM Cloud Pak for Business Automation stored XSS in Web UI](https://junglewise.ai/threats/cve-2026-12749-ibm-cloud-pak-for-business-automation-stored-xss-in-web-ui)
- [IBM Cloud Pak for Business Automation XPath injection](https://junglewise.ai/threats/cve-2026-11864-ibm-cloud-pak-for-business-automation-xpath-injection)
- [IBM Cloud Pak for Business Automation denial of service via resource consumption](https://junglewise.ai/threats/cve-2026-12759-ibm-cloud-pak-for-business-automation-denial-of-service-via)