5.4
Medium
CVE-2026-12742 IBM Business Automation Workflow containers and traditional could allow an authenticated attacker to trigger…
Description
IBM Business Automation Workflow containers and traditional could allow an authenticated attacker to trigger restricted import actions due to missing authorization controls.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Business Automation Workflow containers and traditional 26.0 | 26.0.0 → latest | No fix stated |
| Business Automation Workflow containers and traditional 25.0 | 25.0.0 → latest | No fix stated |
| Business Automation Workflow containers and traditional 24.0 | 24.0.0 → latest | No fix stated |
Other CVEs of Business Automation Workflow containers and traditional
The 6 CVEs of Business Automation Workflow containers and traditional →
CVE-2026-12752
IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection (XXE)…
7.1
High
CVE-2026-12756
IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection (XXE)…
7.1
High
CVE-2026-13107
IBM Business Automation Workflow containers and traditional may use programming model artifacts that are vulnerable to…
7.1
High
CVE-2026-12730
IBM Business Automation Workflow containers and traditional 26.0.0, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1…
3.8
Low