3.8
Low
CVE-2026-12730 IBM Business Automation Workflow containers and traditional 26.0.0, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1…
Description
IBM Business Automation Workflow containers and traditional 26.0.0, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1 through 24.0.1 Interim Fix 007, and 24.0.0 through 24.0.0 Interim Fix 009 IBM Business Automation Workflow fails to properly verify that the hostname matches the server certificate potentially allowing connections to an attacker-controlled server.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Business Automation Workflow containers and traditional | 26.0.0 | No fix stated |
| Business Automation Workflow containers and traditional 25.0 | 25.0.0 → latest | No fix stated |
| Business Automation Workflow containers and traditional 24.0 | 24.0.0 → latest | No fix stated |
Other CVEs of Business Automation Workflow containers and traditional
The 6 CVEs of Business Automation Workflow containers and traditional →
CVE-2026-12742
IBM Business Automation Workflow containers and traditional could allow an authenticated attacker to trigger…
5.4
Medium
CVE-2026-12752
IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection (XXE)…
7.1
High
CVE-2026-12756
IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection (XXE)…
7.1
High
CVE-2026-13107
IBM Business Automation Workflow containers and traditional may use programming model artifacts that are vulnerable to…
7.1
High