Vulnerability details

CVE-2026-93005

IBM Process Mining

Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for October 2026

CVSS 3.1

6.5Medium

Official description

IBM Process Mining 2.0.0 through 2.2.1 could allow an authenticated attacker to cause a denial of service through insufficient rate limiting of email notifications, resulting in excessive emails being sent to targeted recipients.

CVSS scores

Score	Version	Source	Vector
6.5Medium	3.1	CVEProject cvelistV5 (CNA) (ibm)	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H`

Affected products

Vendor	Product	Versions	Source
IBM	Process Mining	2.0.0 ≤ v ≤ 2.2.1	CVEProject cvelistV5 (CNA)

References and advisories

https://www.ibm.com/support/pages/node/7294875 vendor-advisorypatch

Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published: 2026-11-08
Last updated: 2026-11-08
State: Published
Assigner (CNA): ibm

Exploit prediction (EPSS)

No EPSS score has been published for this CVE yet.

Weaknesses (CWE)

CWE-770
Allocation of Resources Without Limits or Throttling