Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:26.0.0:interim_fix_001:*:*:*:*:*:*

part: a version: 26.0.0 update: interim_fix_001

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductBusiness Automation Workflow Containers And Traditional (c963e4fb-b145-51f1-a314-467be2bc3950)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-12756 vulnerable 2026-09-16 04:32:51.684608 Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026
HIGH (7.1)
IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.
Published: 2026-09-14T21:16:03.202Z
Updated: 2026-09-15T14:46:17.100Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12752 vulnerable 2026-09-16 04:32:51.633698 Multiple security vulnerabilities addressed with IBM Business Automation Workflow August 2026
HIGH (7.1)
IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resource.
Published: 2026-09-15T17:02:39.786Z
Updated: 2026-09-15T19:45:17.755Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-12742 vulnerable 2026-09-16 04:32:51.518349 Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026
MEDIUM (5.4)
IBM Business Automation Workflow containers and traditional could allow an authenticated attacker to trigger restricted import actions due to missing authorization controls.
Published: 2026-09-15T17:05:57.276Z
Updated: 2026-09-15T17:32:16.040Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13107 vulnerable 2026-09-16 04:32:50.223459 Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026
HIGH (7.1)
IBM Business Automation Workflow containers and traditional may use programming model artifacts that are vulnerable to XML Entity Injection attacks by default.
Published: 2026-09-14T20:18:34.439Z
Updated: 2026-09-15T17:31:48.482Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.