CVE-2026-114464

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-114464", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2026-10-21T15:01:58.773Z", "datePublished": "2026-11-08T17:00:10.527Z", "dateUpdated": "2026-11-09T20:02:43.239Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-11-08T17:00:10.527Z"}, "title": "Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for October 2026", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-284", "description": "CWE-284 Improper Access Control", "type": "CWE"}]}], "affected": [{"vendor": "IBM", "product": "Process Mining", "versions": [{"status": "affected", "version": "2.0.0", "lessThanOrEqual": "2.2.1", "versionType": "semver"}], "cpes": ["cpe:2.3:a:ibm:process_mining:2.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:process_mining:2.2.1:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "IBM Process Mining 2.0.0 through 2.2.1 could allow a remote attacker to obtain sensitive information due to improper access control.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM Process Mining 2.0.0 through 2.2.1 could allow a remote attacker to obtain sensitive information due to improper access control.</p>"}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7294875", "tags": ["vendor-advisory", "patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "ADJACENT_NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE", "baseSeverity": "CRITICAL", "baseScore": 9.3, "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N"}}], "solutions": [{"lang": "en", "value": "Product(s)Version(s) number and/or range\u00a0Remediation/Fix/InstructionsIBM Process Mining OCP2.0.0 - 2.2.1\n\nIBM strongly suggests that you address the vulnerabilities now for all affected products/versions listed above by installing 2.2.1 IF001\n\nUpgrade to version 2.2.1 IF001\n https://www.ibm.com/support/pages/readme-ibm-process-mining-221-if001 \n\n\n\n\n\nuniIBM Process Mining On-Prem2.0.0 - 2.2.1IBM strongly suggests that you address the vulnerabilities now for all affected products/versions listed above by installing 2.2.1\n\nSteps\n1. Go to IBM Support Portal\nNavigate to https://ibm.com/mysupport and sign in with your IBMid before proceeding.\n2. Open a case\n\n * Click \"Open a case\" from the support portal.\n * Select IBM Process Mining as the product.\n * Fill in the case details, referencing the published security advisory: https://www.ibm.com/support/pages/node/7294875 \n * Request the delivery of IBM Process Mining 2.2.1 IF001, which addresses the documented vulnerabilities.\n\n\n3. Obtain the fix\nThe interim fix will be delivered directly through your support case once it has been opened.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<div><table><colgroup><col/><col/><col/></colgroup><tbody><tr><td>Product(s)</td><td>Version(s) number and/or range\u00a0</td><td>Remediation/Fix/Instructions</td></tr><tr><td>IBM Process Mining OCP</td><td>2.0.0 - 2.2.1</td><td><p>IBM strongly suggests that you address the vulnerabilities now for all affected products/versions listed above by installing 2.2.1 IF001<br/><br/>Upgrade to version 2.2.1 IF001<br/><a href=\"https://www.ibm.com/support/pages/readme-ibm-process-mining-221-if001\" rel=\"nofollow\">https://www.ibm.com/support/pages/readme-ibm-process-mining-221-if001</a></p><p></p></td></tr><tr><td>uniIBM Process Mining On-Prem</td><td>2.0.0 - 2.2.1</td><td><div>IBM strongly suggests that you address the vulnerabilities now for all affected products/versions listed above by installing 2.2.1<br/><br/>Steps<br/>1. Go to IBM Support Portal<br/>Navigate to <a href=\"https://ibm.com/mysupport\" rel=\"nofollow\">https://ibm.com/mysupport</a> and sign in with your IBMid before proceeding.<br/>2. Open a case</div><ul><li>Click \"Open a case\" from the support portal.</li><li>Select IBM Process Mining as the product.</li><li>Fill in the case details, referencing the published security advisory: <a href=\"https://www.ibm.com/support/pages/node/7294875\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/support/pages/node/7294875</a></li><li>Request the delivery of IBM Process Mining 2.2.1 IF001, which addresses the documented vulnerabilities.</li></ul><div>3. Obtain the fix<br/>The interim fix will be delivered directly through your support case once it has been opened.</div></td></tr></tbody></table></div>"}]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-11-09T20:02:31.614574Z", "id": "CVE-2026-114464", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-09T20:02:43.239Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-114464", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-11-09T20:02:31.614574Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-09T20:02:38.395Z"}}], "cna": {"title": "Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for October 2026", "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.3, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:a:ibm:process_mining:2.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:process_mining:2.2.1:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "Process Mining", "versions": [{"status": "affected", "version": "2.0.0", "versionType": "semver", "lessThanOrEqual": "2.2.1"}]}], "solutions": [{"lang": "en", "value": "Product(s)Version(s) number and/or range\u00a0Remediation/Fix/InstructionsIBM Process Mining OCP2.0.0 - 2.2.1\n\nIBM strongly suggests that you address the vulnerabilities now for all affected products/versions listed above by installing 2.2.1 IF001\n\nUpgrade to version 2.2.1 IF001\n https://www.ibm.com/support/pages/readme-ibm-process-mining-221-if001 \n\n\n\n\n\nuniIBM Process Mining On-Prem2.0.0 - 2.2.1IBM strongly suggests that you address the vulnerabilities now for all affected products/versions listed above by installing 2.2.1\n\nSteps\n1. Go to IBM Support Portal\nNavigate to https://ibm.com/mysupport and sign in with your IBMid before proceeding.\n2. Open a case\n\n * Click \"Open a case\" from the support portal.\n * Select IBM Process Mining as the product.\n * Fill in the case details, referencing the published security advisory: https://www.ibm.com/support/pages/node/7294875 \n * Request the delivery of IBM Process Mining 2.2.1 IF001, which addresses the documented vulnerabilities.\n\n\n3. Obtain the fix\nThe interim fix will be delivered directly through your support case once it has been opened.", "supportingMedia": [{"type": "text/html", "value": "<div><table><colgroup><col/><col/><col/></colgroup><tbody><tr><td>Product(s)</td><td>Version(s) number and/or range\u00a0</td><td>Remediation/Fix/Instructions</td></tr><tr><td>IBM Process Mining OCP</td><td>2.0.0 - 2.2.1</td><td><p>IBM strongly suggests that you address the vulnerabilities now for all affected products/versions listed above by installing 2.2.1 IF001<br/><br/>Upgrade to version 2.2.1 IF001<br/><a href=\"https://www.ibm.com/support/pages/readme-ibm-process-mining-221-if001\" rel=\"nofollow\">https://www.ibm.com/support/pages/readme-ibm-process-mining-221-if001</a></p><p></p></td></tr><tr><td>uniIBM Process Mining On-Prem</td><td>2.0.0 - 2.2.1</td><td><div>IBM strongly suggests that you address the vulnerabilities now for all affected products/versions listed above by installing 2.2.1<br/><br/>Steps<br/>1. Go to IBM Support Portal<br/>Navigate to <a href=\"https://ibm.com/mysupport\" rel=\"nofollow\">https://ibm.com/mysupport</a> and sign in with your IBMid before proceeding.<br/>2. Open a case</div><ul><li>Click \"Open a case\" from the support portal.</li><li>Select IBM Process Mining as the product.</li><li>Fill in the case details, referencing the published security advisory: <a href=\"https://www.ibm.com/support/pages/node/7294875\" rel=\"noopener noreferrer nofollow\">https://www.ibm.com/support/pages/node/7294875</a></li><li>Request the delivery of IBM Process Mining 2.2.1 IF001, which addresses the documented vulnerabilities.</li></ul><div>3. Obtain the fix<br/>The interim fix will be delivered directly through your support case once it has been opened.</div></td></tr></tbody></table></div>", "base64": false}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7294875", "tags": ["vendor-advisory", "patch"]}], "descriptions": [{"lang": "en", "value": "IBM Process Mining 2.0.0 through 2.2.1 could allow a remote attacker to obtain sensitive information due to improper access control.", "supportingMedia": [{"type": "text/html", "value": "<p>IBM Process Mining 2.0.0 through 2.2.1 could allow a remote attacker to obtain sensitive information due to improper access control.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-284", "description": "CWE-284 Improper Access Control"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-11-08T17:00:10.527Z"}}}, "cveMetadata": {"cveId": "CVE-2026-114464", "state": "PUBLISHED", "dateUpdated": "2026-11-09T20:02:43.239Z", "dateReserved": "2026-10-21T15:01:58.773Z", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "datePublished": "2026-11-08T17:00:10.527Z", "assignerShortName": "ibm"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:ibm:process_mining:2.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:process_mining:2.2.1:*:*:*:*:*:*:*"], "product": "Process Mining", "vendor": "IBM", "versions": [{"lessThanOrEqual": "2.2.1", "status": "affected", "version": "2.0.0", "versionType": "semver"}]}], "source": "psirt@us.ibm.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "IBM Process Mining 2.0.0 through 2.2.1 could allow a remote attacker to obtain sensitive information due to improper access control."}], "id": "CVE-2026-114464", "lastModified": "2026-11-09T20:18:04.490", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 9.3, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.8, "source": "psirt@us.ibm.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-114464", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-11-09T20:02:31.614574Z", "version": "2.0.3"}}]}, "published": "2026-11-08T17:16:36.583", "references": [{"source": "psirt@us.ibm.com", "url": "https://www.ibm.com/support/pages/node/7294875"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-284"}], "source": "psirt@us.ibm.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[2.0.0,2.2.1]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Process Mining", "source": "cna", "vendor": "IBM"}, "product": "process_mining", "vendor": "ibm"}], "created": "2026-11-08T18:30:11.971463+00:00", "updated": "2026-11-08T19:00:13.836699+00:00", "vendors": ["ibm", "ibm$PRODUCT$process_mining"]}