CVE-2026-114464: Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for October 2026
IBM Process Mining 2.0.0 through 2.2.1 could allow a remote attacker to obtain sensitive information due to improper access control.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Process Miningto a version that resolves this vulnerability.Fixed in 2.2.1Patch IF001 - Operational
Sign in to the IBM Support Portal, open a case for IBM Process Mining, reference security advisory 7294875, and request delivery of IBM Process Mining 2.2.1 IF001 through the support case.
Event History
Frequently Asked Questions
Which deployments are affected?
IBM Process Mining versions 2.0.0 through 2.2.1 are identified as affected.
What does an attacker need to exploit this issue?
The issue is remotely exploitable with low attack complexity and requires no privileges or user interaction, according to the supplied CVSS vector. The attack vector is adjacent network.
What is the potential impact?
Improper access control could allow an attacker to obtain sensitive information. The supplied CVSS vector also indicates high confidentiality and integrity impact, with no availability impact.