5.3
Medium
CVE-2026-12762 IBM Cloud Pak For Business Automation 24.0.0, 24.0.1, 25.0.0, and 26.0.0 could allow a remote attacker to obtain…
Description
IBM Cloud Pak For Business Automation 24.0.0, 24.0.1, 25.0.0, and 26.0.0 could allow a remote attacker to obtain sensitive information exposed in manifest files.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cloud Pak for Business Automation | 26.0.0 | No fix stated |
| Cloud Pak for Business Automation | 25.0.0 | No fix stated |
| Cloud Pak for Business Automation 24.0 | 24.0.0 → 24.0.1 | No fix stated |
Other CVEs of Cloud Pak for Business Automation
The 28 CVEs of Cloud Pak for Business Automation →
CVE-2026-11864
IBM Cloud Pak for Business Automation 26.0.0 through 26.0.0 Interim Fix 001, 25.0.0 through 25.0.0 Interim Fix 005,…
6.5
Medium
CVE-2026-12749
IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting
6.4
Medium
CVE-2026-12750
IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting
6.4
Medium
CVE-2026-12751
IBM Cloud Pak for Business Automation is vulnerable to HTML injection
5.4
Medium