CVE-2025-1838

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

IBM Cloud Pak for Business Automation

24.0.0 and 24.0.1 through 24.0.1 IF001

Authoring allows an authenticated user to bypass client-side data validation in an authoring user interface which could cause a denial of service.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-602

Affected software

No affected versions have been published.

Timeline

Published
May 3, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-18409.8A vulnerability was found in ESAFENET CDG 5.6.3.154.205. It has been rated as critical. Affected by this issue is some unknown functionalityCVE-2025-18419.8A vulnerability classified as critical has been found in ESAFENET CDG 5.6.3.154.205. This affects an unknown part of the file /CDGServer3/loCVE-2025-18424.3A vulnerability classified as problematic was found in FITSTATS Technologies AthleteMonitoring up to 20250302. This vulnerability affects unCVE-2025-18439.8A vulnerability, which was classified as critical, has been found in Mini-Tmall up to 20250211. This issue affects the function select of thCVE-2025-18449.8A vulnerability, which was classified as critical, was found in ESAFENET CDG 5.6.3.154.205_20250114. Affected is an unknown function of the CVE-2025-18459.8A vulnerability has been found in ESAFENET DSM 3.1.2 and classified as critical. Affected by this vulnerability is the function examExportPDCVE-2025-18466.5A vulnerability was found in zj1983 zz up to 2024-8. It has been declared as problematic. This vulnerability affects the function deleteLocaCVE-2025-18478.8A vulnerability was found in zj1983 zz up to 2024-8. It has been rated as critical. This issue affects some unknown processing. The manipulaCVE-2025-18488.8A vulnerability classified as critical has been found in zj1983 zz up to 2024-8. Affected is an unknown function of the file /import_data_chCVE-2025-18498.8A vulnerability classified as critical was found in zj1983 zz up to 2024-8. Affected by this vulnerability is an unknown functionality of thCVE-2025-18509.8A vulnerability, which was classified as critical, has been found in Codezips College Management System 1.0. Affected by this issue is some CVE-2025-18518.8A vulnerability, which was classified as critical, was found in Tenda AC7 up to 15.03.06.44. This affects the function formSetFirewallCfg of
CVE-2025-1838: Medium severity, CVSS 6.5 | Vulnix