Known vulnerabilities in IBM Process Mining 2.0.3 IF001

Vendor: IBM Corporation
Software: IBM Process Mining
Version: 2.0.3 IF001
Software CPE: cpe:2.3:a:ibm_corporation:ibm_process_mining:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 12
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM Process Mining version 2.0.3 IF001 IBM Process Mining 2.0.3 IF001 is affected by 12 vulnerabilities: 1 high, 9 medium, 2 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121666 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-64718		 CWE-1321 Medium
No
No
 2.1.0 19.01.2026 SB2026011995
SB2026011999
SB20260119100
and 25 more
#VU117790 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-62727		 CWE-835 Medium
No
No
 2.1.0 29.10.2025 SB2025102946
SB2025102949
SB2025102950
and 11 more
#VU117483 - Improper input validation
CVE-2025-53066		 CWE-20 Medium
No
No
 2.1.0 22.10.2025 SB20251022107
SB20251022108
SB20251022109
and 118 more
#VU117484 - Improper input validation
CVE-2025-53057		 CWE-20 Medium
No
No
 2.1.0 22.10.2025 SB20251022107
SB20251022108
SB20251022109
and 121 more
#VU117323 - Cross-Site Request Forgery (CSRF)
CVE-2025-41254		 CWE-352 Medium
No
No
 2.1.0 16.10.2025 SB2025101638
SB2025121921
SB2026012235
and 3 more
#VU116684 - Improper input validation
CVE-2025-11226		 CWE-20 Medium
No
No
 2.1.0 07.10.2025 SB2025100745
SB2025100746
SB2025112108
and 19 more
#VU115573 - Protection Mechanism Failure
CVE-2025-41249		 CWE-693 Medium
No
No
 2.1.0 16.09.2025 SB20250916314
SB2025100741
SB20251008143
and 62 more
#VU115570 - Protection Mechanism Failure
CVE-2025-41248		 CWE-693 Medium
No
No
 2.1.0 16.09.2025 SB20250916313
SB2025100741
SB20251008143
and 33 more
#VU114067 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-41242		 CWE-22 Medium
No
No
 2.1.0 14.08.2025 SB2025081411
SB2025100743
SB2025110336
and 18 more
#VU109589 - Improper Authorization
CVE-2025-41232		 CWE-285 High
No
No
 2.1.0 21.05.2025 SB20250521100
SB2025060636
SB2025070708
and 5 more
#VU50139 - Incorrect Default Permissions
CVE-2020-8908		 CWE-276 Low
No
No
 2.1.0 11.12.2020 SB2020121114
SB2021031707
SB2021042104
and 62 more
#VU12886 - Uncontrolled Memory Allocation
CVE-2018-10237		 CWE-789 Low
No
No
 2.1.0 21.05.2018 SB2018052310
SB2018083005
SB2018092411
and 43 more