Known vulnerabilities in IBM Process Mining

Vendor: IBM Corporation
Software: IBM Process Mining
Software CPE: cpe:2.3:a:ibm_corporation:ibm_process_mining:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 318
Public exploits: 38
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Process Mining IBM Process Mining is affected by 318 known vulnerabilities: 1 critical, 66 high, 197 medium, 54 low Critical High Medium Low

Vulnerabilities (318)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121666 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-64718		 CWE-1321 Medium
No
No
 2.1.0 19.01.2026 SB2026011995
SB2026011999
SB20260119100
and 25 more
#VU117790 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-62727		 CWE-835 Medium
No
No
 2.1.0 29.10.2025 SB2025102946
SB2025102949
SB2025102950
and 11 more
#VU117483 - Improper input validation
CVE-2025-53066		 CWE-20 Medium
No
No
 2.1.0 22.10.2025 SB20251022107
SB20251022108
SB20251022109
and 118 more
#VU117484 - Improper input validation
CVE-2025-53057		 CWE-20 Medium
No
No
 2.1.0 22.10.2025 SB20251022107
SB20251022108
SB20251022109
and 121 more
#VU117323 - Cross-Site Request Forgery (CSRF)
CVE-2025-41254		 CWE-352 Medium
No
No
 2.1.0 16.10.2025 SB2025101638
SB2025121921
SB2026012235
and 3 more
#VU116684 - Improper input validation
CVE-2025-11226		 CWE-20 Medium
No
No
 2.1.0 07.10.2025 SB2025100745
SB2025100746
SB2025112108
and 19 more
#VU115573 - Protection Mechanism Failure
CVE-2025-41249		 CWE-693 Medium
No
No
 2.1.0 16.09.2025 SB20250916314
SB2025100741
SB20251008143
and 62 more
#VU115570 - Protection Mechanism Failure
CVE-2025-41248		 CWE-693 Medium
No
No
 2.1.0 16.09.2025 SB20250916313
SB2025100741
SB20251008143
and 33 more
#VU114067 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-41242		 CWE-22 Medium
No
No
 2.1.0 14.08.2025 SB2025081411
SB2025100743
SB2025110336
and 18 more
#VU109589 - Improper Authorization
CVE-2025-41232		 CWE-285 High
No
No
 2.1.0 21.05.2025 SB20250521100
SB2025060636
SB2025070708
and 5 more
#VU99566 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-49766		 CWE-22 Medium
No
No
 2.0 31.10.2024 SB2024103173
SB2024121313
SB2024121851
and 16 more
#VU98519 - Resource exhaustion
CVE-2024-6762		 CWE-400 Medium
No
No
 2.0 14.10.2024 SB20241014113
SB2024110897
SB2025040503
and 2 more
#VU98518 - Resource exhaustion
CVE-2024-9823		 CWE-400 Medium
No
No
 2.0 14.10.2024 SB20241014112
SB2024120637
SB2025011709
and 14 more
#VU97215 - Resource exhaustion
CVE-2024-34155		 CWE-400 Medium
No
No
 2.0 12.09.2024 SB2024091261
SB2024091264
SB2024091265
and 81 more
#VU96058 - Exposure of sensitive information to an unauthorized actor
CVE-2023-50314		 CWE-200 Low
No
No
 2.0 15.08.2024 SB2024081566
SB2024091324
SB2024091814
and 44 more
#VU70123 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-37601		 CWE-94 High
No
No
 2.0 12.12.2022 SB2022121220
SB2023010419
SB2023011403
and 20 more
#VU70122 - Incorrect Regular Expression
CVE-2022-37599		 CWE-185 Medium
No
No
 2.0 12.12.2022 SB2022121221
SB2023010424
SB2023020920
and 19 more
#VU69675 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-24999		 CWE-94 Medium
Available
No
 2.0 29.11.2022 SB2022112910
SB2022112911
SB2022112943
and 49 more
#VU50139 - Incorrect Default Permissions
CVE-2020-8908		 CWE-276 Low
No
No
 2.1.0 11.12.2020 SB2020121114
SB2021031707
SB2021042104
and 62 more
#VU12886 - Uncontrolled Memory Allocation
CVE-2018-10237		 CWE-789 Low
No
No
 2.1.0 21.05.2018 SB2018052310
SB2018083005
SB2018092411
and 43 more


Showing elements 1 - 20 out of 318