Skip to content
OpenAdvisories
High · 7.1 CVE-2026-12752 EUVD-2026-78865GHSA-mrc5-qwcp-hm9c

Multiple security vulnerabilities addressed with IBM Business Automation Workflow August 2026

Published Sep 15, 2026 · Updated Sep 15, 2026 · Assigned by ibm

Vendor: IBM Product: Business Automation Workflow containers and traditional

Description

IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resource.

Affected products

VendorProductAffectedFixed
IBM Business Automation Workflow containers and traditional 26.0.0 – ≤ 26.0.0 Interim Fix 001, 25.0.0 – ≤ 25.0.0 Interim Fix 005, 24.0.1 – ≤ 24.0.1 Interim Fix 008, 24.0.0 – ≤ 24.0.0 Interim Fix 009 —

References