CVE-2025-36436 Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for January 2026.

[
  {
    "cpes": [
      "cpe:2.3:a:ibm:cloud_pak_for_business_automation:25.0.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:cloud_pak_for_business_automation:25.0.0:interim_fix_002:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:cloud_pak_for_business_automation:24.0.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:cloud_pak_for_business_automation:24.0.1:interim_fix_005:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:cloud_pak_for_business_automation:24.0.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:ibm:cloud_pak_for_business_automation:24.0.0:interim_fix_007:*:*:*:*:*:*"
    ],
    "product": "Cloud Pak for Business Automation",
    "vendor": "IBM",
    "versions": [
      {
        "lessThanOrEqual": "25.0.0 Interim Fix 002",
        "status": "affected",
        "version": "25.0.0",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "24.0.1 Interim Fix 005",
        "status": "affected",
        "version": "24.0.1",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "24.0.0 Interim Fix 007",
        "status": "affected",
        "version": "24.0.0",
        "versionType": "semver"
      }
    ]
  }
]