6.4
Moyenne
CVE-2026-12750 IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting
Description
IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cloud Pak for Business Automation 26.0 | 26.0.0 → dernières | Pas de correctif indiqué |
| Cloud Pak for Business Automation 25.0 | 25.0.0 → dernières | Pas de correctif indiqué |
| Cloud Pak for Business Automation 24.0 | 24.0.0 → dernières | Pas de correctif indiqué |
Autres CVE de Cloud Pak for Business Automation
Les 28 CVE de Cloud Pak for Business Automation →
CVE-2026-11864
IBM Cloud Pak for Business Automation 26.0.0 through 26.0.0 Interim Fix 001, 25.0.0 through 25.0.0 Interim Fix 005,…
6.5
Moyenne
CVE-2026-12749
IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting
6.4
Moyenne
CVE-2026-12751
IBM Cloud Pak for Business Automation is vulnerable to HTML injection
5.4
Moyenne
CVE-2026-12758
IBM Cloud Pak for Business Automation could allow a remote attacker to bypass authorization and invoke restricted…
5.4
Moyenne