Threats affecting pkg:maven/com.ibm/process-mining

IBM Process Mining versions 2.0.0 through 2.2.1 contain a vulnerability where an authenticated attacker can trigger a denial of service by exploiting insufficient rate limiting on email notifications. This flaw allows excessive emails to be sent to targeted recipients, potentially overwhelming the system or recipients.

CVE-2026-114464 is a critical vulnerability in IBM Process Mining versions 2.0.0 through 2.2.1. It involves improper access control that could allow a remote attacker to obtain sensitive information without authentication or user interaction.

IBM Process Mining versions 2.0.0 through 2.2.1 contain a vulnerability where client-side enforcement of server-side security mechanisms allows an authenticated user to perform unauthorized actions. This flaw could lead to integrity impacts without affecting confidentiality or availability. The vulnerability has a medium severity rating with a CVSS score of 4.3.

IBM Process Mining versions 2.0.0 through 2.2.1 contain a vulnerability that allows authenticated users to upload files with dangerous types. These files could be executed by other users if opened, potentially leading to limited confidentiality, integrity, and availability impacts.