{"id":"CVE-2026-114464","kind":"vulnerability","aliases":["CVE-2026-114464"],"related":[],"title":"IBM Process Mining: remote attacker can obtain sensitive information","description":"IBM Process Mining 2.0.0 through 2.2.1 could allow a remote attacker to obtain sensitive information due to improper access control.","summary":"IBM Process Mining versions 2.0.0 through 2.2.1 have an improper access control flaw. A remote attacker can obtain sensitive information from the product.","severity":"critical","cvss":9.3,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"IBM Process Mining","fixed":["2.2.1 IF001"],"affected":">= 2.0.0, <= 2.2.1","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["enterprise","ibm-process-mining","openshift","self-hosted","vendor"],"not_affected_if":[],"how_to_check":"Check the installed IBM Process Mining version (OCP operator deployment or on-prem install). Versions 2.0.0 through 2.2.1 are affected, including 2.2.1 without IF001. Fixed build is 2.2.1 IF001.","fix":"Upgrade IBM Process Mining to 2.2.1 IF001. OCP: follow https://www.ibm.com/support/pages/readme-ibm-process-mining-221-if001. On-Prem: open a case at https://ibm.com/mysupport (IBM Process Mining), reference the bulletin and request 2.2.1 IF001; IBM's text also says 'installing 2.2.1', so confirm the exact build with IBM.","status":"open","published_at":"2026-11-08T17:16:36+00:00","first_seen_at":"2026-11-08T17:22:01+00:00","triaged_at":"2026-11-08T17:24:13+00:00","updated_at":"2026-11-08T17:25:50+00:00","category":"vendor","confidence":0.85,"triage":{"at":"2026-11-08T17:24:13Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"IBM Process Mining: remote attacker can obtain sensitive information","impact":"medium","summary":"IBM Process Mining versions 2.0.0 through 2.2.1 have an improper access control flaw. A remote attacker can obtain sensitive information from the product.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["ibm-process-mining","enterprise"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"remote attacker reads sensitive information from the product","analyst_note":"Confirm the fixed version and required configuration from IBM's security bulletin for CVE-2026-114464; sources give only the affected range.","how_to_check":"- Check the installed Process Mining version against the affected range `2.0.0` through `2.2.1`\n- unknown","plain_action":"","product_name":"IBM Process Mining","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Organizations running IBM Process Mining in the affected version range 2.0.0 through 2.2.1 are exposed to remote access to sensitive information. The sources do not say which deployment or configuration is required, or whether authentication is needed. unknown","user_interaction":"no","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000693,"input_tokens":4510,"output_tokens":484,"severity_before":"critical"},"analyst_status":"done","analyst_note":"Confirm the fixed version and required configuration from IBM's security bulletin for CVE-2026-114464; sources give only the affected range.","search":"'-114464':12A,15A '-2026':11A,14A '2.0.0':33B,55C '2.2.1':35B,57C 'access':39B,70C 'allow':59C 'attack':5A,44B,62C 'control':40B,71C 'could':58C 'cve':10A,13A 'due':67C 'enterpris':19B 'flaw':41B 'host':27B 'ibm':1A,16A,21B,29B,52C 'ibm-process-min':20B 'improp':38B,69C 'inform':9A,48B,66C 'mine':3A,23B,31B,54C 'mining':18A 'obtain':7A,46B,64C 'openshift':24B 'process':2A,17A,22B,30B,53C 'product':51B 'remot':4A,43B,61C 'self':26B 'self-host':25B 'sensit':8A,47B,65C 'vendor':28B 'version':32B","nicknames":[],"mitigations":[],"who_affected":"Teams running IBM Process Mining 2.0.0 through 2.2.1, on OpenShift (OCP) or on-prem. IBM rates it 9.3 with an adjacent-network vector and no authentication or user interaction, so exposure is mainly to anyone who can reach the service from the same network segment. IBM does not name a required setting. Teams not running Process Mining can skip it.","tier":"B","verified":{"fix":{"at":"2026-11-08T17:25:50Z","by":"analyst","doc":"https://www.ibm.com/support/pages/security-bulletin-multiple-security-vulnerabilities-are-addressed-ibm-process-mining-interim-fix-october-2026","run_id":2202},"products":{"at":"2026-11-08T17:25:50Z","by":"analyst","doc":"https://www.ibm.com/support/pages/security-bulletin-multiple-security-vulnerabilities-are-addressed-ibm-process-mining-interim-fix-october-2026","run_id":2202},"how_to_check":{"at":"2026-11-08T17:25:50Z","by":"analyst","doc":"https://www.ibm.com/support/pages/security-bulletin-multiple-security-vulnerabilities-are-addressed-ibm-process-mining-interim-fix-october-2026","run_id":2202},"who_affected":{"at":"2026-11-08T17:25:50Z","by":"analyst","doc":"https://www.ibm.com/support/pages/security-bulletin-multiple-security-vulnerabilities-are-addressed-ibm-process-mining-interim-fix-october-2026","run_id":2202}},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["ibmprocessmining","processmining"],"ptokens":["ibm","mining","process"],"labels":["critical","enterprise","ibmprocessmining","openshift","selfhosted","vendor"],"campaign_type":null,"search_a":"'-114464':12A,15A '-2026':11A,14A 'attack':5A 'cve':10A,13A 'ibm':1A,16A 'inform':9A 'mine':3A 'mining':18A 'obtain':7A 'process':2A,17A 'remot':4A 'sensit':8A","search_b":"'2.0.0':33B '2.2.1':35B 'access':39B 'attack':44B 'control':40B 'enterpris':19B 'flaw':41B 'host':27B 'ibm':21B,29B 'ibm-process-min':20B 'improp':38B 'inform':48B 'mine':23B,31B 'obtain':46B 'openshift':24B 'process':22B,30B 'product':51B 'remot':43B 'self':26B 'self-host':25B 'sensit':47B 'vendor':28B 'version':32B","search_c":"'2.0.0':55C '2.2.1':57C 'access':70C 'allow':59C 'attack':62C 'control':71C 'could':58C 'due':67C 'ibm':52C 'improp':69C 'inform':66C 'mine':54C 'obtain':64C 'process':53C 'remot':61C 'sensit':65C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-08T17:16:36+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N","cvss_by":"psirt@us.ibm.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-114464","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114464","severity":null,"published_at":"2026-11-08T17:16:36+00:00","modified_at":"2026-11-08T17:16:36+00:00","first_seen_at":"2026-11-08T17:22:01+00:00","fetched_at":"2026-11-08T17:22:01+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-114464:2202","url":"https://www.ibm.com/support/pages/security-bulletin-multiple-security-vulnerabilities-are-addressed-ibm-process-mining-interim-fix-october-2026","severity":null,"published_at":"2026-11-08T17:25:50+00:00","modified_at":"2026-11-08T17:25:50+00:00","first_seen_at":"2026-11-08T17:25:50+00:00","fetched_at":"2026-11-08T17:25:50+00:00","note":"Read IBM Oct 2026 bulletin (via WebFetch; web-cli text was truncated before this CVE). Fix: 2.2.1 IF001; OCP via readme, on-prem via IBM support case. No workarounds listed. CVSS 9.3 by IBM, vector AV:A (adjacent network), PR:N. Required config not stated.","cites":["https://www.ibm.com/support/pages/security-bulletin-multiple-security-vulnerabilities-are-addressed-ibm-process-mining-interim-fix-october-2026"]}],"documents":[{"id":102717,"url":"https://www.ibm.com/support/pages/security-bulletin-multiple-security-vulnerabilities-are-addressed-ibm-process-mining-interim-fix-october-2026","title":"IBM Security Bulletin: Process Mining Interim Fix for October 2026","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}