6.5
Moyenne
CVE-2026-11864 IBM Cloud Pak for Business Automation 26.0.0 through 26.0.0 Interim Fix 001, 25.0.0 through 25.0.0 Interim Fix 005,…
Description
IBM Cloud Pak for Business Automation 26.0.0 through 26.0.0 Interim Fix 001, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1 through 24.0.1 Interim Fix 008, and 24.0.0 through 24.0.0 Interim Fix 009 is vulnerable to an XPath injection vulnerability, which could allow an authenticated attacker to exfiltrate sensitive application data and/or determine the structure of the XML document.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cloud Pak for Business Automation 26.0 | 26.0.0 → dernières | Pas de correctif indiqué |
| Cloud Pak for Business Automation 25.0 | 25.0.0 → dernières | Pas de correctif indiqué |
| Cloud Pak for Business Automation 24.0 | 24.0.0 → dernières | Pas de correctif indiqué |
Autres CVE de Cloud Pak for Business Automation
Les 28 CVE de Cloud Pak for Business Automation →
CVE-2026-12749
IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting
6.4
Moyenne
CVE-2026-12750
IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting
6.4
Moyenne
CVE-2026-12751
IBM Cloud Pak for Business Automation is vulnerable to HTML injection
5.4
Moyenne
CVE-2026-12758
IBM Cloud Pak for Business Automation could allow a remote attacker to bypass authorization and invoke restricted…
5.4
Moyenne