Cloud Pak For Business Automation
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:cloud_pak_for_business_automation:26.0.0:interim_fix_001:*:*:*:*:*:*
part: a version: 26.0.0 update: interim_fix_001
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Cloud Pak For Business Automation (a4bd115d-b36d-5e7c-968b-9a2600014916) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-12759 |
vulnerable | 2026-09-16 04:32:51.251753 |
Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.
MEDIUM (6.5)
IBM Cloud Pak for Business Automation could allow an authenticated user to cause a denial of service due to uncontrolled resource consumption.
Published: 2026-09-14T21:13:46.499Z
Updated: 2026-09-15T17:31:46.297Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-12749 |
vulnerable | 2026-09-16 04:32:51.025393 |
Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.
MEDIUM (6.4)
IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2026-09-15T17:05:23.604Z
Updated: 2026-09-20T00:45:43.961Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-12751 |
vulnerable | 2026-09-16 04:32:50.997160 |
Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.
MEDIUM (5.4)
IBM Cloud Pak for Business Automation is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.
Published: 2026-09-15T17:03:34.515Z
Updated: 2026-09-15T19:01:03.260Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-12750 |
vulnerable | 2026-09-16 04:32:50.902875 |
Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.
MEDIUM (6.4)
IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2026-09-15T17:04:27.949Z
Updated: 2026-09-17T16:21:12.478Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-12758 |
vulnerable | 2026-09-16 04:32:50.815008 |
Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.
MEDIUM (5.4)
IBM Cloud Pak for Business Automation could allow a remote attacker to bypass authorization and invoke restricted endpoints due to improper validation of HTTP headers.
Published: 2026-09-14T21:15:24.700Z
Updated: 2026-09-15T17:31:46.140Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-11864 |
vulnerable | 2026-09-16 04:32:46.250539 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.