CVE-2026-108292: falha de média gravidade em IBM Process Mining
Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for October 2026
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
10Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.5
IBM Process Mining 2.0.0 through 2.2.1 could allow an authenticated user to upload a file with dangerous types that could be executed by another user if opened.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
Produtos afetados
IBM · Process MiningCVEs relacionadas — IBM Process Mining
No mesmo produto, das mais perigosas para as menos.
CVE-2025-36016MEDIUMIBM Process Mining HTTP open redirectEPSS 0.2%CVE-2026-93005MEDIUMMultiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for October 2026EPSS —CVE-2026-114464CRITICALMultiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for October 2026EPSS —CVE-2026-112369MEDIUMMultiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for October 2026EPSS —