CVE-2026-12730

EPSS 0.17%
Veröffentlicht 05.08.2026 16:16:49
Zuletzt bearbeitet 10.08.2026 19:34:48
CVE-Watchlists
Login
Unerledigt
Login

Improper Validation of Certificate with Host Mismatch in IBM Business Automation Workflow containers

IBM Business Automation Workflow containers and traditional 26.0.0, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1 through 24.0.1 Interim Fix 007, and 24.0.0 through 24.0.0 Interim Fix 009 IBM Business Automation Workflow fails to properly verify that the hostname matches the server certificate potentially allowing connections to an attacker-controlled server.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 50 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Business Automation Workflow Version24.0.0 Update- SwEditioncontainers

Ibm ≫ Business Automation Workflow Version24.0.0 Update- SwEditiontraditional

Ibm ≫ Business Automation Workflow Version24.0.0 Updateif001 SwEditioncontainers

Ibm ≫ Business Automation Workflow Version24.0.0 Updateif001 SwEditiontraditional

Ibm ≫ Business Automation Workflow Version24.0.0 Updateif002 SwEditioncontainers

Ibm ≫ Business Automation Workflow Version24.0.0 Updateif002 SwEditiontraditional

Ibm ≫ Business Automation Workflow Version24.0.0 Updateif003 SwEditioncontainers

Ibm ≫ Business Automation Workflow Version24.0.0 Updateif003 SwEditiontraditional

Ibm ≫ Business Automation Workflow Version24.0.0 Updateif004 SwEditioncontainers

Ibm ≫ Business Automation Workflow Version24.0.0 Updateif004 SwEditiontraditional

Ibm ≫ Business Automation Workflow Version24.0.0 Updateif005 SwEditioncontainers

Ibm ≫ Business Automation Workflow Version24.0.0 Updateif005 SwEditiontraditional

Ibm ≫ Business Automation Workflow Version24.0.0 Updateif006 SwEditioncontainers

Ibm ≫ Business Automation Workflow Version24.0.0 Updateif006 SwEditiontraditional

Ibm ≫ Business Automation Workflow Version24.0.0 Updateif007 SwEditioncontainers

Ibm ≫ Business Automation Workflow Version24.0.0 Updateif007 SwEditiontraditional

Ibm ≫ Business Automation Workflow Version24.0.0 Updateif008 SwEditioncontainers

Ibm ≫ Business Automation Workflow Version24.0.0 Updateif008 SwEditiontraditional

Ibm ≫ Business Automation Workflow Version24.0.0 Updateif009 SwEditioncontainers

Ibm ≫ Business Automation Workflow Version24.0.0 Updateif009 SwEditiontraditional

Ibm ≫ Business Automation Workflow Version24.0.1 Update- SwEditioncontainers

Ibm ≫ Business Automation Workflow Version24.0.1 Update- SwEditiontraditional

Ibm ≫ Business Automation Workflow Version24.0.1 Updateif001 SwEditioncontainers

Ibm ≫ Business Automation Workflow Version24.0.1 Updateif001 SwEditiontraditional

Ibm ≫ Business Automation Workflow Version24.0.1 Updateif002 SwEditioncontainers

Ibm ≫ Business Automation Workflow Version24.0.1 Updateif002 SwEditiontraditional

Ibm ≫ Business Automation Workflow Version24.0.1 Updateif003 SwEditioncontainers

Ibm ≫ Business Automation Workflow Version24.0.1 Updateif003 SwEditiontraditional

Ibm ≫ Business Automation Workflow Version24.0.1 Updateif004 SwEditioncontainers

Ibm ≫ Business Automation Workflow Version24.0.1 Updateif004 SwEditiontraditional

Ibm ≫ Business Automation Workflow Version24.0.1 Updateif005 SwEditioncontainers

Ibm ≫ Business Automation Workflow Version24.0.1 Updateif005 SwEditiontraditional

Ibm ≫ Business Automation Workflow Version24.0.1 Updateif006 SwEditioncontainers

Ibm ≫ Business Automation Workflow Version24.0.1 Updateif006 SwEditiontraditional

Ibm ≫ Business Automation Workflow Version24.0.1 Updateif007 SwEditioncontainers

Ibm ≫ Business Automation Workflow Version24.0.1 Updateif007 SwEditiontraditional

Ibm ≫ Business Automation Workflow Version25.0.0 Update- SwEditioncontainers

Ibm ≫ Business Automation Workflow Version25.0.0 Update- SwEditiontraditional

Ibm ≫ Business Automation Workflow Version25.0.0 Updateif001 SwEditioncontainers

Ibm ≫ Business Automation Workflow Version25.0.0 Updateif001 SwEditiontraditional

Ibm ≫ Business Automation Workflow Version25.0.0 Updateif002 SwEditioncontainers

Ibm ≫ Business Automation Workflow Version25.0.0 Updateif002 SwEditiontraditional

Ibm ≫ Business Automation Workflow Version25.0.0 Updateif003 SwEditioncontainers

Ibm ≫ Business Automation Workflow Version25.0.0 Updateif003 SwEditiontraditional

Ibm ≫ Business Automation Workflow Version25.0.0 Updateif004 SwEditioncontainers

Ibm ≫ Business Automation Workflow Version25.0.0 Updateif004 SwEditiontraditional

Ibm ≫ Business Automation Workflow Version25.0.0 Updateif005 SwEditioncontainers

Ibm ≫ Business Automation Workflow Version25.0.0 Updateif005 SwEditiontraditional

Ibm ≫ Business Automation Workflow Version26.0.0 Update- SwEditioncontainers

Ibm ≫ Business Automation Workflow Version26.0.0 Update- SwEditiontraditional

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.17%	0.062

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
IBM	3.8	1.2	2.5	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N

CWE-297 Improper Validation of Certificate with Host Mismatch

The product communicates with a host that provides a certificate, but the product does not properly ensure that the certificate is actually associated with that host.

https://www.ibm.com/support/pages/node/7282596

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2026-12730

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-12730

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-12730

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-12730