← All advisories

Medium severity6.5NVD Advisory· Published May 3, 2025· Updated Jun 17, 2026

CVE-2025-1838

CVE-2025-1838

Description

IBM Cloud Pak for Business Automation

24.0.0 and 24.0.1 through 24.0.1 IF001

Authoring allows an authenticated user to bypass client-side data validation in an authoring user interface which could cause a denial of service.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9

IBM/Cloud Pak For Business Automationllm-fuzzy9 versions
24.0.0, 24.0.1, 24.0.1 IF001+ 8 more
- (no CPE)range: 24.0.0, 24.0.1, 24.0.1 IF001
- cpe:2.3:a:ibm:cloud_pak_for_business_automation:24.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:cloud_pak_for_business_automation:24.0.0:-:*:*:*:*:*:*
- cpe:2.3:a:ibm:cloud_pak_for_business_automation:24.0.0:interim_fix_001:*:*:*:*:*:*
- cpe:2.3:a:ibm:cloud_pak_for_business_automation:24.0.0:interim_fix_002:*:*:*:*:*:*
- cpe:2.3:a:ibm:cloud_pak_for_business_automation:24.0.0:interim_fix_003:*:*:*:*:*:*
- cpe:2.3:a:ibm:cloud_pak_for_business_automation:24.0.0:interim_fix_004:*:*:*:*:*:*
- cpe:2.3:a:ibm:cloud_pak_for_business_automation:24.0.1:-:*:*:*:*:*:*
- cpe:2.3:a:ibm:cloud_pak_for_business_automation:24.0.1:interim_fix_001:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

www.ibm.com/support/pages/node/7232429nvdVendor Advisory

News mentions

0

No linked articles in our index yet.