Ibm Business Automation Workflow Containers And Traditional vulnerabilities
6 known vulnerabilities affecting ibm/business_automation_workflow_containers_and_traditional.
Total CVEs
6
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH3MEDIUM2LOW1
Vulnerabilities
Page 1 of 1
CVE-2026-12752P3HIGHCVSS 7.1≥ 26.0.0, ≤ 26.0.0 Interim Fix 001≥ 25.0.0, ≤ 25.0.0 Interim Fix 005+2 more2026-09-15
CVE-2026-12752 [HIGH] CWE-611 CVE-2026-12752: IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity
IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resource.
nvd
CVE-2026-12756P3HIGHCVSS 7.1≥ 26.0.0, ≤ 26.0.0 Interim Fix 001≥ 25.0.0, ≤ 25.0.0 Interim Fix 005+2 more2026-09-14
CVE-2026-12756 [HIGH] CWE-611 CVE-2026-12756: IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity
IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.
nvd
CVE-2026-13107P3HIGHCVSS 7.1≥ 26.0.0, ≤ 26.0.0 Interim Fix 001≥ 25.0.0, ≤ 25.0.0 Interim Fix 005+2 more2026-09-14
CVE-2026-13107 [HIGH] CWE-611 CVE-2026-13107: IBM Business Automation Workflow containers and traditional may use programming model artifacts that
IBM Business Automation Workflow containers and traditional may use programming model artifacts that are vulnerable to XML Entity Injection attacks by default.
nvd
CVE-2026-12742P4MEDIUMCVSS 5.4≥ 26.0.0, ≤ 26.0.0 Interim Fix 001≥ 25.0.0, ≤ 25.0.0 Interim Fix 005+2 more2026-09-15
CVE-2026-12742 [MEDIUM] CWE-862 CVE-2026-12742: IBM Business Automation Workflow containers and traditional could allow an authenticated attacker to
IBM Business Automation Workflow containers and traditional could allow an authenticated attacker to trigger restricted import actions due to missing authorization controls.
nvd
CVE-2026-1248P4MEDIUMCVSS 4.3v25.0.1≥ 25.0.0, ≤ 25.0.0 Interim Fix 003+2 more2026-05-27
CVE-2026-1248 [MEDIUM] CWE-209 CVE-2026-1248: IBM Business Automation Workflow containers and traditional may leak information about its database
IBM Business Automation Workflow containers and traditional may leak information about its database structure in error messages.
nvd
CVE-2026-12730P4LOWCVSS 3.8v26.0.0≥ 25.0.0, ≤ 25.0.0 Interim Fix 005+2 more2026-08-05
CVE-2026-12730 [LOW] CWE-297 CVE-2026-12730: IBM Business Automation Workflow containers and traditional 26.0.0, 25.0.0 through 25.0.0 Interim Fi
IBM Business Automation Workflow containers and traditional 26.0.0, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1 through 24.0.1 Interim Fix 007, and 24.0.0 through 24.0.0 Interim Fix 009 IBM Business Automation Workflow fails to properly verify that the hostname matches the server certificate potentially allowing connections to an attacker-controlled
nvd