CVE-2026-11864: IBM IBM Cloud Pak For Business Automation Process Federation Server vulnerability
Published Sep 1, 2026
·Updated
IBM Cloud Pak For Business Automation Process Federation Server is vulnerable to an XPath injection vulnerability, which could allow an authenticated attacker to exfiltrate sensitive application data and/or determine the structure of the XML document.
Affected Software
1 affected component
IBM IBM Cloud Pak For Business Automation Process Federation Server
Event History
Sep 1, 2026
CVE Published
via IBM·12:00 AM
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software