https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-12751.htmlhttps://patchthecve.com/cve/CVE-2026-12751.htmlWed, 23 Sep 2026 20:15:43 +0000MEDIUM 5.4: IBM Cloud Pak for Business Automation is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.https://patchthecve.com/cve/CVE-2026-12750.htmlhttps://patchthecve.com/cve/CVE-2026-12750.htmlWed, 23 Sep 2026 20:14:38 +0000MEDIUM 6.4: IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.https://patchthecve.com/cve/CVE-2026-12749.htmlhttps://patchthecve.com/cve/CVE-2026-12749.htmlWed, 23 Sep 2026 20:12:42 +0000MEDIUM 6.4: IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.