CVE-2025-36091
Medium · 4.3CVSS
4.3
EPSS
0.4%
Published
Nov 3, 2025
CISA due date
—
The record
IBM Cloud Pak For Business Automation 25.0.0, 24.0.1, and 24.0.0 could allow an authenticated user to cause dashboards to become inaccessible to legitimate users due to invalid ownership assignment.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|