7.1
High
CVE-2026-13107 IBM Business Automation Workflow containers and traditional may use programming model artifacts that are vulnerable to…
Description
IBM Business Automation Workflow containers and traditional may use programming model artifacts that are vulnerable to XML Entity Injection attacks by default.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Business Automation Workflow containers and traditional 26.0 | 26.0.0 → latest | No fix stated |
| Business Automation Workflow containers and traditional 25.0 | 25.0.0 → latest | No fix stated |
| Business Automation Workflow containers and traditional 24.0 | 24.0.0 → latest | No fix stated |
Other CVEs of Business Automation Workflow containers and traditional
The 6 CVEs of Business Automation Workflow containers and traditional →
CVE-2026-12742
IBM Business Automation Workflow containers and traditional could allow an authenticated attacker to trigger…
5.4
Medium
CVE-2026-12752
IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection (XXE)…
7.1
High
CVE-2026-12756
IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection (XXE)…
7.1
High
CVE-2026-12730
IBM Business Automation Workflow containers and traditional 26.0.0, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1…
3.8
Low