IBM Process Mining 2.0.0-2.2.1 Improper Access Control Remote Info Leak
CVE-2026-114464 Published on November 8, 2026
Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for October 2026
IBM Process Mining 2.0.0 through 2.2.1 could allow a remote attacker to obtain sensitive information due to improper access control.
Vulnerability Analysis
Attack Vector:
ADJACENT_NETWORK
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
NONE
Scope:
CHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
NONE
Weakness Type
What is an Authorization Vulnerability?
The software does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CVE-2026-114464 has been classified to as an Authorization vulnerability or weakness.
Products Associated with CVE-2026-114464
Want to know whenever a new CVE is published for IBM Process Mining? stack.watch will email you.
Affected Versions
IBM Process Mining:- Version 2.0.0, <= 2.2.1 is affected.