CVE-2026-108292: fallo de gravedad media en IBM Process Mining
Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for October 2026
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
10Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 5.5
IBM Process Mining 2.0.0 through 2.2.1 could allow an authenticated user to upload a file with dangerous types that could be executed by another user if opened.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
Productos afectados
IBM · Process MiningCVEs relacionadas — IBM Process Mining
En el mismo producto, de las más peligrosas a las menos.
CVE-2025-36016MEDIUMIBM Process Mining HTTP open redirectEPSS 0.2%CVE-2026-93005MEDIUMMultiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for October 2026EPSS —CVE-2026-114464CRITICALMultiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for October 2026EPSS —CVE-2026-112369MEDIUMMultiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for October 2026EPSS —