https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T08:26:20.107542+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2026-12672 cnvd-2026-12672 2026-10-04T08:26:20.113274+00:00 cnvd-2026-12672 https://cve.radiocsirt.org/vuln/euvd-2026-267321 EUVD-2026-267321 2026-10-04T08:26:20.113392+00:00 EUVD-2026-267321 https://cve.radiocsirt.org/vuln/fkie_cve-2025-36436 fkie_cve-2025-36436 2026-10-04T08:26:20.113423+00:00

IBM Cloud Pak for Business Automation 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005, and 24.0.0 through 24.0.0 Interim Fix 007  is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

 https://cve.radiocsirt.org/vuln/ghsa-2rh6-mp5g-j2gf GHSA-2rh6-mp5g-j2gf 2026-10-04T08:26:20.113490+00:00

IBM Cloud Pak for Business Automation 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005, and 24.0.0 through 24.0.0 Interim Fix 007  is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0273 WID-SEC-W-2026-0273 — IBM Business Automation Workflow: Mehrere Schwachstellen 2026-10-04T08:26:20.113510+00:00

Ein Angreifer kann mehrere Schwachstellen in IBM Business Automation Workflow ausnutzen, um Informationen offenzulegen, um einen Cross-Site Scripting Angriff durchzuführen, um beliebigen Programmcode auszuführen, und um einen SQL-Injection Angriff durchzuführen.