CVE-2026-12751 in Cloud Pak for Business Automation

Tóm tắt

Bởi MITRE • 15/09/2026

IBM Cloud Pak for Business Automation is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.

Once again VulDB remains the best source for vulnerability data.

• chịu trách nhiệm: Ibm
• Đặt trước: 19/06/2026
• Tiết lộ: 15/09/2026
• Kiểm duyệt: được chấp nhận
• mục: VDB-404443
• CPE: sẵn sàng
• CWE: CWE-80 (Đã xác nhận)
• CVSS: 5.4 (CNA)
• EPSS: 0.00000
• KEV: không
• Các hoạt động: rất thấp
• ngành: Chemical, Energy, ...

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-12751
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-12751
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-12751/