SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-12749

MEDIUM · CVSS 6.4 EPSS 0.25%

Source: NVD + CISA KEV + EPSS · Published 2026-09-15 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

IBM Cloud Pak for Business Automation is susceptible to stored cross-site scripting, enabling authenticated users to inject arbitrary JavaScript into the Web UI. This could compromise the integrity of user sessions, potentially leading to credential disclosure. Organizations utilizing this platform should prioritize remediation to mitigate risks associated with unauthorized access and data exposure.

CVE
CVE-2026-12749
Severity
MEDIUM
CVSS
6.4
EPSS
0.25%
Java

Original NVD Description

IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.