Search Results (4 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-114464 1 Ibm 1 Process Mining 2026-11-08 9.3 Critical
IBM Process Mining 2.0.0 through 2.2.1 could allow a remote attacker to obtain sensitive information due to improper access control.
CVE-2026-112369 1 Ibm 1 Process Mining 2026-11-08 4.3 Medium
IBM Process Mining 2.0.0 through 2.2.1 could allow an authenticated user to perform unauthorized actions due to client-side enforcement of sever side security mechanisms.
CVE-2026-108292 1 Ibm 1 Process Mining 2026-11-08 5.5 Medium
IBM Process Mining 2.0.0 through 2.2.1 could allow an authenticated user to upload a file with dangerous types that could be executed by another user if opened.
CVE-2025-36016 1 Ibm 1 Process Mining 2025-08-24 6.8 Medium
IBM Process Mining 2.0.1 IF001 and 2.0.1 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim.