high
advisory
IBM Process Mining: Improper access control (CVE-2026-114464)
IBM Process Mining 2.0.0 through 2.2.1 could allow a remote attacker to obtain sensitive information due to improper access control.
CVE search metadata
CVE search record: CVE-2026-114464. Severity: critical. CVSS: 9.3. KEV: no. Product: Process Mining (2.0.0 through 2.2.1). Brief: IBM Process Mining: Improper access control (CVE-2026-114464). Brief link: https://feed.craftedsignal.io/briefs/2026-11-ibm-process-mining-info-disclosure/
Triage facts
Revision 1- Applicability
- Process Mining (2.0.0 through 2.2.1)
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Nov 8, 19:33 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
IBM Process Mining versions 2.0.0 through 2.2.1 are affected by a vulnerability involving improper access control. This vulnerability could allow a remote attacker to obtain sensitive information.