Business Automation Workflow Containers And Traditional
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:26.0.0:*:*:*:*:*:*:*
part: a version: 26.0.0 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Business Automation Workflow Containers And Traditional (c963e4fb-b145-51f1-a314-467be2bc3950) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-12756 |
vulnerable | 2026-09-16 04:32:51.683820 |
Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026
HIGH (7.1)
IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.
Published: 2026-09-14T21:16:03.202Z
Updated: 2026-09-15T14:46:17.100Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-12730 |
vulnerable | 2026-09-16 04:32:51.648867 |
Improper Validation of Certificate with Host Mismatch in IBM Business Automation Workflow containers
LOW (3.8)
IBM Business Automation Workflow containers and traditional 26.0.0, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1 through 24.0.1 Interim Fix 007, and 24.0.0 through 24.0.0 Interim Fix 009 IBM Business Automation Workflow fails to properly verify that the hostname matches the server certificate potentially allowing connections to an attacker-controlled server.
Published: 2026-08-05T15:57:37.007Z
Updated: 2026-08-05T17:59:18.166Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-12752 |
vulnerable | 2026-09-16 04:32:51.632635 |
Multiple security vulnerabilities addressed with IBM Business Automation Workflow August 2026
HIGH (7.1)
IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resource.
Published: 2026-09-15T17:02:39.786Z
Updated: 2026-09-15T19:45:17.755Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-12742 |
vulnerable | 2026-09-16 04:32:51.517241 |
Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026
MEDIUM (5.4)
IBM Business Automation Workflow containers and traditional could allow an authenticated attacker to trigger restricted import actions due to missing authorization controls.
Published: 2026-09-15T17:05:57.276Z
Updated: 2026-09-15T17:32:16.040Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-13107 |
vulnerable | 2026-09-16 04:32:50.222120 |
Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026
HIGH (7.1)
IBM Business Automation Workflow containers and traditional may use programming model artifacts that are vulnerable to XML Entity Injection attacks by default.
Published: 2026-09-14T20:18:34.439Z
Updated: 2026-09-15T17:31:48.482Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.