CNNVD-202602-203 Information

CNNVD ID

CNNVD-202602-203

CVE-2025-36094

  • CNNVD Published: 2026-02-03

Description (Chinese)

IBM Cloud Pak for Business Automation是美国国际商业机器(IBM)公司的一组模块化的集成软件组件,专为任何混合云而构建,旨在实现工作自动化和加速业务增长。 IBM Cloud Pak for Business Automation 25.0.0版本至25.0.0 Interim Fix 002版本、24.0.1版本至24.0.1 Interim Fix 005版本和24.0.0版本至24.0.0 Interim Fix 007版本存在安全漏洞,该漏洞源于输入长度验证不当,可能导致拒绝服务或数据损坏。

Description (English)

IBM Cloud Pak for Business Automation is a modular integrated software component of the United States International Business Machine (IBM) Company, built for any hybrid cloud, aimed at automating work and accelerating business growth. IBM Cloud Pak for Business Action 25.0.0 to 25.0.0 Interim Fix 002, 24.0.1 to 24.0.1 Interim Fix 005 and 24.0.0 to 24.0.0 Interim Fix 007 have security gaps, which stem from inappropriate input length verification and may lead to denial of services or data damage.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

国际商业机器

Published

2026-02-03

Last Modified

2026-02-24

References

https://www.ibm.com/support/pages/node/7259318

Patch

https://www.ibm.com/support/pages/node/7259318

Share on: