Veille CVE

Recherche « IBM Cloud Pak for Business Automation »

8 CVE

Critique 0 Élevée 0 Moyenne 8 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « IBM Cloud Pak for Business Automation » ✕
  1. CVE-2026-12751 5.4 Moyenne

    IBM Cloud Pak for Business Automation

    IBM Cloud Pak for Business Automation is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.

  2. CVE-2026-12750 5.4 Moyenne

    IBM Cloud Pak for Business Automation

    IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

  3. CVE-2026-12749 5.4 Moyenne

    IBM Cloud Pak for Business Automation

    IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

  4. CVE-2026-11864 6.5 Moyenne

    IBM Cloud Pak for Business Automation

    IBM Cloud Pak for Business Automation 26.0.0 through 26.0.0 Interim Fix 001, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1 through 24.0.1 Interim Fix 008, and 24.0.0 through 24.0.0 Interim Fix 009 is vulnerable to an XPath injection vulnerability, which could allow an authenticated attacker to exfiltrate sensitive application data and/or determine the structure of the XML document.

  5. CVE-2026-12759 6.5 Moyenne

    IBM Cloud Pak for Business Automation

    IBM Cloud Pak for Business Automation could allow an authenticated user to cause a denial of service due to uncontrolled resource consumption.

  6. CVE-2026-12758 5.4 Moyenne

    IBM Cloud Pak for Business Automation

    IBM Cloud Pak for Business Automation could allow a remote attacker to bypass authorization and invoke restricted endpoints due to improper validation of HTTP headers.

  7. CVE-2026-81859 6.2 Moyenne

    IBM Cloud Pak for Business Automation

    CP4BA - IBM Enterprise Records could allow a local attacker to obtain sensitive information due to the use of a broken or risky cryptographic algorithm.

  8. CVE-2026-12762 5.3 Moyenne

    IBM Cloud Pak For Business Automation · Ibm business automation insights

    IBM Cloud Pak For Business Automation 24.0.0, 24.0.1, 25.0.0, and 26.0.0 could allow a remote attacker to obtain sensitive information exposed in manifest files.