CVE-2025-36054 | IBM Business Automation Workflow containers up to 24.0.0 IF006/24.0.1 IF004/25.0.0 IF001 cross site scripting

A vulnerability was found in IBM Business Automation Workflow containers and Business Automation Workflow traditional with Process Federation Server up to 24.0.0 IF006/24.0.1 IF004/25.0.0 IF001. It has been declared as problematic. This affects an unknown part. The manipulation results in cross site scripting.

This vulnerability is cataloged as CVE-2025-36054. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.