CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-12750

IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 16.8%

CVSS Severity

CVSS v3 Score 6.4

References

https://www.ibm.com/support/pages/node/7285931

Products affected by CVE-2026-12750

Ibm » Cloud Pak For Business Automation » Version: 24.0.0

cpe:2.3:a:ibm:cloud_pak_for_business_automation:24.0.0
Ibm » Cloud Pak For Business Automation » Version: 24.0.1

cpe:2.3:a:ibm:cloud_pak_for_business_automation:24.0.1
Ibm » Cloud Pak For Business Automation » Version: 25.0.0

cpe:2.3:a:ibm:cloud_pak_for_business_automation:25.0.0
Ibm » Cloud Pak For Business Automation » Version: 26.0.0

cpe:2.3:a:ibm:cloud_pak_for_business_automation:26.0.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-12750

Products

Pricing

Contact Us