CVE-2026-12751

Katalog CVE

CVSS 5.4 · Medium EPSS 0,20%

Kerentanan Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) pada ibm cloud pak for business automation. Skor CVSS 3.1 5.4 (Medium) menurut us.ibm.com.

Deskripsi (NVD)

IBM Cloud Pak for Business Automation is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.

Rincian

Terbit di NVD

15 September 2026

Terakhir diubah

23 September 2026

Status NVD

Analyzed

CVSS 3.1

5.4 (Medium), sumber us.ibm.com
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

EPSS (30 hari)

0,20% peluang dieksploitasi; lebih tinggi dari 8,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.ibm.com/support/pages/node/7285931 advisory vendor