IBM Cloud Pak for Business Automation Denial-of-Service Vulnerability

Vulnerability

A denial-of-service vulnerability has been identified in IBM Cloud Pak for Business Automation versions 25.0.0, 24.0.1, and 24.0.0. This vulnerability allows an authenticated user to disrupt service by exploiting improper validation of input length.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the application to become unresponsive or unavailable.

Remediation

Users are advised to upgrade to IBM Business Automation Insights versions 25.0.0-IF002, 24.0.1-IF005, or 24.0.0-IF005.

Added: Nov 3, 2025, 4:20 PM
Updated: Nov 3, 2025, 4:20 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
2.5
exploitability
5.2
remediation
7.7
relevance
0.9
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.