Skip to content
OpenAdvisories
Medium · 6.4 CVE-2026-12749 EUVD-2026-78868GHSA-4vv3-cjfh-wrf7

Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.

Published Sep 15, 2026 · Updated Sep 20, 2026 · Assigned by ibm

Vendor: IBM Product: Cloud Pak for Business Automation

Description

IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Affected products

VendorProductAffectedFixed
IBM Cloud Pak for Business Automation 26.0.0 – ≤ 26.0.0 Interim Fix 001, 25.0.0 – ≤ 25.0.0 Interim Fix 005, 24.0.1 – ≤ 24.0.1 Interim Fix 008, 24.0.0 – ≤ 24.0.0 Interim Fix 009 —

References