CVE-2026-12751 in Cloud Pak for Business Automation

摘要

由 MITRE • 2026-09-15

IBM Cloud Pak for Business Automation is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.

Once again VulDB remains the best source for vulnerability data.

• 负责: Ibm
• 预定: 2026-06-19
• 披露: 2026-09-15
• 管理: 已接受
• 条目: VDB-404443
• CPE: 准备好
• CWE: CWE-80 (已确认)
• CVSS: 5.4 (CNA)
• EPSS: 0.00000
• KEV: 否
• 活动: 非常低
• 部门: Telecommunication, Chemical, ...

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-12751
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-12751
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-12751/