CVE-2025-36059mediumCWE-250

CVE-2025-36059: falha de média gravidade em IBM Business Automation Workflow containers

Multiple security vulnerabilities are addressed in IBM Business Automation Workflow Containers fixes December 2025

Publicada em

Seguir esta CVE+ Monitorar Business Automation Workflow containers

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.7epss 0.1%
IBM Business Automation Workflow containers 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005, and 24.0.0 through 24.0.0 Interim Fix 006. IBM Cloud Pak for Business Automation could allow a local user with access to the container to execute OS system calls.
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
Produtos afetados
IBM · Business Automation Workflow containers
CVEs relacionadas — IBM Business Automation Workflow containers

No mesmo produto, das mais perigosas para as menos.

CVE-2025-13096HIGHXML eXternal Entity injection (XXE) vulnerability affect IBM Business Automation Workflow -EPSS 0.5%CVE-2025-36054MEDIUMCross-site scripting vulnerability affect IBM Business Automation Workflow Process Federation Server -EPSS 0.2%CVE-2025-36058MEDIUMMultiple security vulnerabilities are addressed in IBM Business Automation Workflow Containers fixes December 2025EPSS 0.1%