Security
Loading…

CVE-2026-12751

MEDIUMCVSS 5.4
View on NVD← Back to search
Description

IBM Cloud Pak for Business Automation is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.

Timeline
Published:September 15th, 2026 6:17 PM
Last modified:September 23rd, 2026 8:15 PM
CVSS Scoring

CVSS v3: 5.4 (MEDIUM)

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Affected Software
From NVD CPE configuration data

Vendors

ibm

Products

cloud_pak_for_business_automation
Weaknesses (CWE)
CWE-80
References & Reports
Advisories, patches, and third-party reports

Source: NIST NVD · Data may lag official sources by up to one minute