CVE-2026-12730
Full vulnerability record from the local CVENow database.
Description
IBM Business Automation Workflow containers and traditional 26.0.0, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1 through 24.0.1 Interim Fix 007, and 24.0.0 through 24.0.0 Interim Fix 009 IBM Business Automation Workflow fails to properly verify that the hostname matches the server certificate potentially allowing connections to an attacker-controlled server.
Severity
LOW
CVSS score
3.8
(v3.1)
Vulnerability status
Analyzed
Source identifier
Published
2026-08-05 16:16:49.440000
Last modified
2026-10-23 21:10:00.157000
View original CVE JSON
{
"id": "CVE-2026-12730",
"sourceIdentifier": "[email protected]",
"published": "2026-08-05T16:16:49.440",
"lastModified": "2026-10-23T21:10:00.157",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "IBM Business Automation Workflow containers and traditional 26.0.0, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1 through 24.0.1 Interim Fix 007, and 24.0.0 through 24.0.0 Interim Fix 009 IBM Business Automation Workflow fails to properly verify that the hostname matches the server certificate potentially allowing connections to an attacker-controlled server."
},
{
"lang": "es",
"value": "IBM Business Automation Workflow, en sus contenedores y versiones tradicionales 26.0.0, 25.0.0 hasta 25.0.0 Interim Fix 005, 24.0.1 hasta 24.0.1 Interim Fix 007, y 24.0.0 hasta 24.0.0 Interim Fix 009, no verifica correctamente que el nombre de host coincida con el certificado del servidor, lo que podría permitir conexiones a un servidor controlado por un atacante."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "IBM",
"product": "Business Automation Workflow containers and traditional",
"cpes": [
"cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:26.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:25.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:25.0.0:interim_fix_005:*:*:*:*:*:*",
"cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:24.0.1:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:24.0.1:interim_fix_007:*:*:*:*:*:*",
"cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:24.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:24.0.0:interim_fix_009:*:*:*:*:*:*"
],
"versions": [
{
"version": "26.0.0",
"status": "affected"
},
{
"version": "25.0.0",
"lessThanOrEqual": "25.0.0 Interim Fix 005",
"versionType": "semver",
"status": "affected"
},
{
"version": "24.0.1",
"lessThanOrEqual": "24.0.1 Interim Fix 007",
"versionType": "semver",
"status": "affected"
},
{
"version": "24.0.0",
"lessThanOrEqual": "24.0.0 Interim Fix 009",
"versionType": "semver",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N",
"baseScore": 3.8,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 1.2,
"impactScore": 2.5
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-08-05T17:59:02.663931Z",
"id": "CVE-2026-12730",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-297"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:-:*:*:containers:*:*:*",
"matchCriteriaId": "EF29B7C7-5024-4A85-ADE5-D94E9002181D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:-:*:*:traditional:*:*:*",
"matchCriteriaId": "475B8FBB-09BA-4509-B007-2AA407DCA3B5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if001:*:*:containers:*:*:*",
"matchCriteriaId": "8464D4F4-1F9A-479B-B689-C6E90BC3AF45"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if001:*:*:traditional:*:*:*",
"matchCriteriaId": "6EDAD1E1-BDB8-4B23-AA83-7678355AB5CF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if002:*:*:containers:*:*:*",
"matchCriteriaId": "0FE0DB1D-5728-4075-BE84-48F06E22FDF5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if002:*:*:traditional:*:*:*",
"matchCriteriaId": "5EF56DFD-48DB-4DA1-9056-A980DC7CA697"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if003:*:*:containers:*:*:*",
"matchCriteriaId": "A4AB37B4-DF91-4DC7-AFB9-107E5B1B2BF6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if003:*:*:traditional:*:*:*",
"matchCriteriaId": "C1711BF6-5F1A-4238-A4D0-C80602B11C49"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if004:*:*:containers:*:*:*",
"matchCriteriaId": "79318EB6-001D-4D75-952C-87297C90A0C8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if004:*:*:traditional:*:*:*",
"matchCriteriaId": "11C6C4D0-E200-43E3-A779-ED7BBB057032"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if005:*:*:containers:*:*:*",
"matchCriteriaId": "38F4B5AC-AC9D-48E7-9EC8-48C086CC62A6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if005:*:*:traditional:*:*:*",
"matchCriteriaId": "33079C3C-3415-4305-A015-37C46BBB46E4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if006:*:*:containers:*:*:*",
"matchCriteriaId": "73BAD8DC-3081-4D07-8E65-7501351DE025"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if006:*:*:traditional:*:*:*",
"matchCriteriaId": "784B6E6A-2F7F-488F-A190-FC6CAE7920F0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if007:*:*:containers:*:*:*",
"matchCriteriaId": "87CBC521-DDDD-4D6B-B82F-3D7260CB7C67"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if007:*:*:traditional:*:*:*",
"matchCriteriaId": "DC646C5B-D3F9-4B8E-94F2-44F42A17B0B4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if008:*:*:containers:*:*:*",
"matchCriteriaId": "7675FC59-E23F-4816-B1EF-DB8E1CEA30DD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if008:*:*:traditional:*:*:*",
"matchCriteriaId": "68F2FFA3-761D-4E58-B1E9-CAC651BF620B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if009:*:*:containers:*:*:*",
"matchCriteriaId": "1492C2D4-4CB6-4EF3-B64C-31F9A7C8508F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if009:*:*:traditional:*:*:*",
"matchCriteriaId": "F25CC4F0-EAD4-4357-A693-0596DFA77976"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:-:*:*:containers:*:*:*",
"matchCriteriaId": "D5D9EC44-05CE-44FA-AFDE-A4FA326A54F7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:-:*:*:traditional:*:*:*",
"matchCriteriaId": "DCBC0FB0-E803-4CC3-9CDD-9DA0D91EE08F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if001:*:*:containers:*:*:*",
"matchCriteriaId": "AD2EC4AD-EF47-450F-AA73-8BEE3DADEA1A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if001:*:*:traditional:*:*:*",
"matchCriteriaId": "E3E71BEB-B904-48F3-8665-466ACC9AC1B2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if002:*:*:containers:*:*:*",
"matchCriteriaId": "0CFCCD13-9342-4D3D-BE9C-ABCA4EA27229"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if002:*:*:traditional:*:*:*",
"matchCriteriaId": "C345B5B1-B7B2-401D-A554-B7E3F6FF29B8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if003:*:*:containers:*:*:*",
"matchCriteriaId": "8F82A13E-F355-4B56-A9ED-9B8D728D95D3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if003:*:*:traditional:*:*:*",
"matchCriteriaId": "0BAEF1EF-59E7-4502-B890-5F89EEE81DCB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if004:*:*:containers:*:*:*",
"matchCriteriaId": "5797C332-AE9A-40BF-BAA4-7ECDDEAA907C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if004:*:*:traditional:*:*:*",
"matchCriteriaId": "AAEC8FDE-1BAE-477C-BF27-F136B877DAAE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if005:*:*:containers:*:*:*",
"matchCriteriaId": "D0F5EB0D-CAF6-45BC-967B-472F1C2833D9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if005:*:*:traditional:*:*:*",
"matchCriteriaId": "E2D1C66F-BAA2-414C-A1F0-651526353081"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if006:*:*:containers:*:*:*",
"matchCriteriaId": "63C11C87-A5EF-406D-86A5-13B7CB4BBB82"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if006:*:*:traditional:*:*:*",
"matchCriteriaId": "5BEFDA15-7D42-48CF-B89C-E72811A796B7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if007:*:*:containers:*:*:*",
"matchCriteriaId": "A1E48A02-67B2-46D0-A693-EF289F6EA410"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if007:*:*:traditional:*:*:*",
"matchCriteriaId": "B7C132CE-5918-475C-9CB0-686C7A916D7B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:-:*:*:containers:*:*:*",
"matchCriteriaId": "3058E645-44E1-4FF0-9A97-E04324BB8968"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:-:*:*:traditional:*:*:*",
"matchCriteriaId": "EA15073D-EA2F-479E-B7DC-F6280806410E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if001:*:*:containers:*:*:*",
"matchCriteriaId": "0E06ACEC-AC03-41AA-91C7-BA84457847A7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if001:*:*:traditional:*:*:*",
"matchCriteriaId": "D3A28BF1-C38A-4600-BFB5-C4EFD40BEA0B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if002:*:*:containers:*:*:*",
"matchCriteriaId": "6AD427CB-B553-4ACB-B2A3-1648848D6D09"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if002:*:*:traditional:*:*:*",
"matchCriteriaId": "03533F96-66A4-430D-B7A2-C77CE6A65B32"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if003:*:*:containers:*:*:*",
"matchCriteriaId": "4528EEFE-9EA6-4103-AC2B-581816A4776C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if003:*:*:traditional:*:*:*",
"matchCriteriaId": "DFE51BD6-9AF7-43BE-9EE3-1A16420CBC97"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if004:*:*:containers:*:*:*",
"matchCriteriaId": "102DB0FF-47B9-4CCF-A490-CD511F9B93BE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if004:*:*:traditional:*:*:*",
"matchCriteriaId": "23475BA8-BE2F-4A92-A1E0-19581FD5AB95"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if005:*:*:containers:*:*:*",
"matchCriteriaId": "CC9713AA-5648-4E7C-8EC1-A7065C52D03C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if005:*:*:traditional:*:*:*",
"matchCriteriaId": "72F30A37-91E3-44D4-A185-E9DFA550FEEC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:26.0.0:-:*:*:containers:*:*:*",
"matchCriteriaId": "74C81C62-F323-4E91-9169-E4C114649B78"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:26.0.0:-:*:*:traditional:*:*:*",
"matchCriteriaId": "74599AD8-9ECD-44FB-B63E-7EDC41B11F65"
}
]
}
]
}
],
"references": [
{
"url": "https://www.ibm.com/support/pages/node/7282596",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}