7.1
High
CVE-2026-12756 IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection (XXE)…
Description
IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Business Automation Workflow containers and traditional 26.0 | 26.0.0 → latest | No fix stated |
| Business Automation Workflow containers and traditional 25.0 | 25.0.0 → latest | No fix stated |
| Business Automation Workflow containers and traditional 24.0 | 24.0.0 → latest | No fix stated |
Other CVEs of Business Automation Workflow containers and traditional
The 6 CVEs of Business Automation Workflow containers and traditional →
CVE-2026-12742
IBM Business Automation Workflow containers and traditional could allow an authenticated attacker to trigger…
5.4
Medium
CVE-2026-12752
IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection (XXE)…
7.1
High
CVE-2026-13107
IBM Business Automation Workflow containers and traditional may use programming model artifacts that are vulnerable to…
7.1
High
CVE-2026-12730
IBM Business Automation Workflow containers and traditional 26.0.0, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1…
3.8
Low