3.8
Faible
CVE-2026-12730 IBM Business Automation Workflow containers and traditional 26.0.0, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1…
Description
IBM Business Automation Workflow containers and traditional 26.0.0, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1 through 24.0.1 Interim Fix 007, and 24.0.0 through 24.0.0 Interim Fix 009 IBM Business Automation Workflow fails to properly verify that the hostname matches the server certificate potentially allowing connections to an attacker-controlled server.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Business Automation Workflow containers and traditional | 26.0.0 | Pas de correctif indiqué |
| Business Automation Workflow containers and traditional 25.0 | 25.0.0 → dernières | Pas de correctif indiqué |
| Business Automation Workflow containers and traditional 24.0 | 24.0.0 → dernières | Pas de correctif indiqué |
Autres CVE de Business Automation Workflow containers and traditional
Les 6 CVE de Business Automation Workflow containers and traditional →
CVE-2026-12742
IBM Business Automation Workflow containers and traditional could allow an authenticated attacker to trigger…
5.4
Moyenne
CVE-2026-12752
IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection (XXE)…
7.1
Élevée
CVE-2026-12756
IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection (XXE)…
7.1
Élevée
CVE-2026-13107
IBM Business Automation Workflow containers and traditional may use programming model artifacts that are vulnerable to…
7.1
Élevée