9.3
Critical
CVE-2026-15091 IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to execute arbitrary scripts due to…
Description
IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to execute arbitrary scripts due to improper neutralization of input during web page generation.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Engineering AI Hub | 1.2.0 | No fix stated |
| Engineering AI Hub | 1.1.0 | No fix stated |
| Engineering AI Hub | 1.0.0 | No fix stated |
Other CVEs of Engineering AI Hub
The 4 CVEs of Engineering AI Hub →
CVE-2026-15069
IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to execute arbitrary script code due to…
5.4
Medium
CVE-2026-15093
IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to redirect users to malicious websites due…
4.3
Medium
CVE-2026-15322
IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to obtain sensitive information due to…
7.5
High