5.4
CVE-2026-12758
- EPSS 0.3%
- Veröffentlicht 14.09.2026 21:15:24
- Zuletzt bearbeitet 16.09.2026 19:24:58
- Erkennungen
Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.
IBM Cloud Pak for Business Automation could allow a remote attacker to bypass authorization and invoke restricted endpoints due to improper validation of HTTP headers.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerIBM
≫
Produkt
Cloud Pak for Business Automation
Version <=
26.0.0 Interim Fix 001
Version
26.0.0
Status
affected
Version <=
25.0.0 Interim Fix 005
Version
25.0.0
Status
affected
Version <=
24.0.1 Interim Fix 008
Version
24.0.1
Status
affected
Version <=
24.0.0 Interim Fix 009
Version
24.0.0
Status
affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.3% | 0.231 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| IBM | 5.4 | 2.8 | 2.5 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
|
CWE-862 Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
https://www.ibm.com/support/pages/node/7285931