CVE-2026-12762

EPSS 0.24%
Veröffentlicht 05.08.2026 16:16:49
Zuletzt bearbeitet 10.08.2026 19:27:19
CVE-Watchlists
Login
Unerledigt
Login

Insertion of Sensitive Information into Externally-Accessible File in IBM Business Automation Insights

IBM Cloud Pak For Business Automation 24.0.0, 24.0.1, 25.0.0, and 26.0.0 could allow a remote attacker to obtain sensitive information exposed in manifest files.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 23 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Business Automation Insights Version24.0.0 Update-

Ibm ≫ Business Automation Insights Version24.0.0 Updateinterim_fix001

Ibm ≫ Business Automation Insights Version24.0.0 Updateinterim_fix002

Ibm ≫ Business Automation Insights Version24.0.0 Updateinterim_fix003

Ibm ≫ Business Automation Insights Version24.0.0 Updateinterim_fix004

Ibm ≫ Business Automation Insights Version24.0.0 Updateinterim_fix005

Ibm ≫ Business Automation Insights Version24.0.0 Updateinterim_fix006

Ibm ≫ Business Automation Insights Version24.0.0 Updateinterim_fix007

Ibm ≫ Business Automation Insights Version24.0.1 Update-

Ibm ≫ Business Automation Insights Version24.0.1 Updateinterim_fix001

Ibm ≫ Business Automation Insights Version24.0.1 Updateinterim_fix002

Ibm ≫ Business Automation Insights Version24.0.1 Updateinterim_fix003

Ibm ≫ Business Automation Insights Version24.0.1 Updateinterim_fix004

Ibm ≫ Business Automation Insights Version24.0.1 Updateinterim_fix005

Ibm ≫ Business Automation Insights Version24.0.1 Updateinterim_fix006

Ibm ≫ Business Automation Insights Version24.0.1 Updateinterim_fix007

Ibm ≫ Business Automation Insights Version25.0.0 Update-

Ibm ≫ Business Automation Insights Version25.0.0 Updateinterim_fix001

Ibm ≫ Business Automation Insights Version25.0.0 Updateinterim_fix002

Ibm ≫ Business Automation Insights Version25.0.0 Updateinterim_fix003

Ibm ≫ Business Automation Insights Version25.0.0 Updateinterim_fix004

Ibm ≫ Business Automation Insights Version25.0.0 Updateinterim_fix005

Ibm ≫ Business Automation Insights Version26.0.0 Update-

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.24%	0.152

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
IBM	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory

The product places sensitive information into files or directories that are accessible to actors who are allowed to have access to the files, but not to the sensitive information.

https://www.ibm.com/support/pages/node/7282605

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2026-12762

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-12762

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-12762

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-12762