Vulnerabilidades do Ibm Business Automation Workflow containers and traditional
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Ibm Business Automation Workflow containers and traditional: 6 registro(s), com versões afetadas e correções.
CVE-2026-12752
Alta · 7.1
CWE-611 15/09/2026
Multiple security vulnerabilities addressed with IBM Business Automation Workflow August 2026
IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resource.
CVE-2026-12742
Média · 5.4
CWE-862 15/09/2026
Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026
IBM Business Automation Workflow containers and traditional could allow an authenticated attacker to trigger restricted import actions due to missing authorization controls.
CVE-2026-12756
Alta · 7.1
CWE-611 14/09/2026
Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026
IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.
CVE-2026-13107
Alta · 7.1
CWE-611 14/09/2026
Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026
IBM Business Automation Workflow containers and traditional may use programming model artifacts that are vulnerable to XML Entity Injection attacks by default.
CVE-2026-12730
Baixa · 3.8
CWE-297 05/08/2026
Improper Validation of Certificate with Host Mismatch in IBM Business Automation Workflow containers
IBM Business Automation Workflow containers and traditional 26.0.0, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1 through 24.0.1 Interim Fix 007, and 24.0.0 through 24.0.0 Interim Fix 009 IBM Business Automation Workflow fails to properly verify that the hostname matches the server certificate potentially allowing connections to an attacker-controlled server.
CVE-2026-1248
Média · 4.3
CWE-209 27/05/2026
IBM Business Automation Workflow information leak
IBM Business Automation Workflow containers and traditional may leak information about its database structure in error messages.