Ibm

Business Automation Workflow

58 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2026-12742

  • EPSS 0.23%
  • Veröffentlicht 15.09.2026 17:05:57
  • Zuletzt bearbeitet 16.09.2026 19:22:22

IBM Business Automation Workflow containers and traditional could allow an authenticated attacker to trigger restricted import actions due to missing authorization controls.

7.1

CVE-2026-12752

  • EPSS 0.5%
  • Veröffentlicht 15.09.2026 17:02:39
  • Zuletzt bearbeitet 16.09.2026 19:21:55

IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory ...

7.1

CVE-2026-12756

  • EPSS 0.5%
  • Veröffentlicht 14.09.2026 21:16:03
  • Zuletzt bearbeitet 16.09.2026 19:21:55

IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory ...

7.1

CVE-2026-13107

  • EPSS 0.36%
  • Veröffentlicht 14.09.2026 20:18:34
  • Zuletzt bearbeitet 16.09.2026 19:24:58

IBM Business Automation Workflow containers and traditional may use programming model artifacts that are vulnerable to XML Entity Injection attacks by default.

3.8

CVE-2026-12730

  • EPSS 0.17%
  • Veröffentlicht 05.08.2026 16:16:49
  • Zuletzt bearbeitet 10.08.2026 19:34:48

IBM Business Automation Workflow containers and traditional 26.0.0, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1 through 24.0.1 Interim Fix 007, and 24.0.0 through 24.0.0 Interim Fix 009 IBM Business Automation Workflow fails to properly verify that...

4.3

CVE-2026-1248

  • EPSS 0.22%
  • Veröffentlicht 27.05.2026 15:16:24
  • Zuletzt bearbeitet 28.05.2026 17:19:25

IBM Business Automation Workflow containers and traditional may leak information about its database structure in error messages.

7.1

CVE-2025-13096

  • EPSS 0.46%
  • Veröffentlicht 02.02.2026 23:15:58
  • Zuletzt bearbeitet 12.02.2026 19:01:45

IBM Business Automation Workflow containers V25.0.0 through V25.0.0-IF007, V24.0.1 - V24.0.1-IF007, V24.0.0 - V24.0.0-IF007 and IBM Business Automation Workflow traditional V25.0.0, V24.0.1, V24.0.0 is vulnerable to an XML external entity injection (...

5.5

CVE-2025-36058

  • EPSS 0.11%
  • Veröffentlicht 20.01.2026 15:09:07
  • Zuletzt bearbeitet 17.02.2026 17:29:28

IBM Business Automation Workflow containers 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005, and 24.0.0 through 24.0.0 Interim Fix 006. IBM Cloud Pak for Business Automation and IBM Business Automation Workflow containers...

5.5

CVE-2025-36059

  • EPSS 0.09%
  • Veröffentlicht 20.01.2026 15:07:46
  • Zuletzt bearbeitet 17.02.2026 17:24:57

IBM Business Automation Workflow containers 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005, and 24.0.0 through 24.0.0 Interim Fix 006. IBM Cloud Pak for Business Automation could allow a local user with access to the con...

6.1

CVE-2025-36054

  • EPSS 0.2%
  • Veröffentlicht 06.11.2025 14:11:49
  • Zuletzt bearbeitet 12.12.2025 15:21:32

IBM Business Automation Workflow containers 24.0.0 through 24.0.0-IF006, 24.0.1 through 24.0.1-IF004, 25.0.0 through 25.0.0-IF001 and IBM Business Automation Workflow traditional with Process Federation Server 24.0.0 through 24.0.1 and 25.0.0 are vul...