CVE-2026-12752: falha de alta gravidade em IBM Business Automation Workflow containers…
Multiple security vulnerabilities addressed with IBM Business Automation Workflow August 2026
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.1epss 0.5%
IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resource.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L
Produtos afetados
IBM · Business Automation Workflow containers and traditionalCVEs relacionadas — IBM Business Automation Workflow containers…
No mesmo produto, das mais perigosas para as menos.
CVE-2026-12756HIGHMultiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026EPSS 0.5%CVE-2026-13107HIGHMultiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026EPSS 0.4%CVE-2026-12742MEDIUMMultiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026EPSS 0.2%CVE-2026-1248MEDIUMIBM Business Automation Workflow information leakEPSS 0.2%CVE-2026-12730LOWImproper Validation of Certificate with Host Mismatch in IBM Business Automation Workflow containersEPSS 0.2%