Denial of Service Vulnerability in IBM Process Mining
CVE-2026-93005

6.5MEDIUM

Key Information:

Vendor

IBM
Status
Process Mining
Vendor
CVE Published:
8 November 2026

What is CVE-2026-93005?

IBM Process Mining versions 2.0.0 through 2.2.1 are susceptible to a denial of service attack due to inadequate rate limiting of email notifications. This vulnerability can be exploited by an authenticated attacker, allowing them to inundate targeted recipients with excessive email notifications, potentially disrupting service and user experience.

Affected Version(s)

Process Mining 2.0.0 <= 2.2.1

References

https://www.ibm.com/support/pages/node/7294875
vendor-advisorypatch

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.