CVE-2026-1248

{"id": "CVE-2026-1248", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-1248", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-27T16:17:58.791902Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "affected": [{"source": "psirt@us.ibm.com", "affectedData": [{"cpes": ["cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:25.0.1:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:25.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:25.0.0:interim_fix_003:*:*:*:*:*:*", "cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:24.0.1:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:24.0.1:interim_fix_006:*:*:*:*:*:*", "cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:24.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:24.0.0:interim_fix_008:*:*:*:*:*:*"], "vendor": "IBM", "product": "Business Automation Workflow containers and traditional", "versions": [{"status": "affected", "version": "25.0.1"}, {"status": "affected", "version": "25.0.0", "versionType": "semver", "lessThanOrEqual": "25.0.0 Interim Fix 003"}, {"status": "affected", "version": "24.0.1", "versionType": "semver", "lessThanOrEqual": "24.0.1 Interim Fix 006"}, {"status": "affected", "version": "24.0.0", "versionType": "semver", "lessThanOrEqual": "24.0.0 Interim Fix 008"}]}]}], "published": "2026-05-27T15:16:24.920", "references": [{"url": "https://www.ibm.com/support/pages/node/7271445", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-209"}]}], "descriptions": [{"lang": "en", "value": "IBM Business Automation Workflow containers and traditional\u00a0may leak information about its database structure in error messages."}], "lastModified": "2026-06-17T10:15:23.547", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:-:*:*:containers:*:*:*", "vulnerable": true, "matchCriteriaId": "EF29B7C7-5024-4A85-ADE5-D94E9002181D"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:-:*:*:traditional:*:*:*", "vulnerable": true, "matchCriteriaId": "475B8FBB-09BA-4509-B007-2AA407DCA3B5"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if001:*:*:containers:*:*:*", "vulnerable": true, "matchCriteriaId": "8464D4F4-1F9A-479B-B689-C6E90BC3AF45"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if001:*:*:traditional:*:*:*", "vulnerable": true, "matchCriteriaId": "6EDAD1E1-BDB8-4B23-AA83-7678355AB5CF"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if002:*:*:containers:*:*:*", "vulnerable": true, "matchCriteriaId": "0FE0DB1D-5728-4075-BE84-48F06E22FDF5"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if002:*:*:traditional:*:*:*", "vulnerable": true, "matchCriteriaId": "5EF56DFD-48DB-4DA1-9056-A980DC7CA697"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if003:*:*:containers:*:*:*", "vulnerable": true, "matchCriteriaId": "A4AB37B4-DF91-4DC7-AFB9-107E5B1B2BF6"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if003:*:*:traditional:*:*:*", "vulnerable": true, "matchCriteriaId": "C1711BF6-5F1A-4238-A4D0-C80602B11C49"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if004:*:*:containers:*:*:*", "vulnerable": true, "matchCriteriaId": "79318EB6-001D-4D75-952C-87297C90A0C8"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if004:*:*:traditional:*:*:*", "vulnerable": true, "matchCriteriaId": "11C6C4D0-E200-43E3-A779-ED7BBB057032"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if005:*:*:containers:*:*:*", "vulnerable": true, "matchCriteriaId": "38F4B5AC-AC9D-48E7-9EC8-48C086CC62A6"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if005:*:*:traditional:*:*:*", "vulnerable": true, "matchCriteriaId": "33079C3C-3415-4305-A015-37C46BBB46E4"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if006:*:*:containers:*:*:*", "vulnerable": true, "matchCriteriaId": "73BAD8DC-3081-4D07-8E65-7501351DE025"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if006:*:*:traditional:*:*:*", "vulnerable": true, "matchCriteriaId": "784B6E6A-2F7F-488F-A190-FC6CAE7920F0"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if007:*:*:containers:*:*:*", "vulnerable": true, "matchCriteriaId": "87CBC521-DDDD-4D6B-B82F-3D7260CB7C67"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if007:*:*:traditional:*:*:*", "vulnerable": true, "matchCriteriaId": "DC646C5B-D3F9-4B8E-94F2-44F42A17B0B4"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if008:*:*:containers:*:*:*", "vulnerable": true, "matchCriteriaId": "7675FC59-E23F-4816-B1EF-DB8E1CEA30DD"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if008:*:*:traditional:*:*:*", "vulnerable": true, "matchCriteriaId": "68F2FFA3-761D-4E58-B1E9-CAC651BF620B"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:-:*:*:containers:*:*:*", "vulnerable": true, "matchCriteriaId": "D5D9EC44-05CE-44FA-AFDE-A4FA326A54F7"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:-:*:*:traditional:*:*:*", "vulnerable": true, "matchCriteriaId": "DCBC0FB0-E803-4CC3-9CDD-9DA0D91EE08F"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if001:*:*:containers:*:*:*", "vulnerable": true, "matchCriteriaId": "AD2EC4AD-EF47-450F-AA73-8BEE3DADEA1A"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if001:*:*:traditional:*:*:*", "vulnerable": true, "matchCriteriaId": "E3E71BEB-B904-48F3-8665-466ACC9AC1B2"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if002:*:*:containers:*:*:*", "vulnerable": true, "matchCriteriaId": "0CFCCD13-9342-4D3D-BE9C-ABCA4EA27229"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if002:*:*:traditional:*:*:*", "vulnerable": true, "matchCriteriaId": "C345B5B1-B7B2-401D-A554-B7E3F6FF29B8"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if003:*:*:containers:*:*:*", "vulnerable": true, "matchCriteriaId": "8F82A13E-F355-4B56-A9ED-9B8D728D95D3"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if003:*:*:traditional:*:*:*", "vulnerable": true, "matchCriteriaId": "0BAEF1EF-59E7-4502-B890-5F89EEE81DCB"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if004:*:*:containers:*:*:*", "vulnerable": true, "matchCriteriaId": "5797C332-AE9A-40BF-BAA4-7ECDDEAA907C"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if004:*:*:traditional:*:*:*", "vulnerable": true, "matchCriteriaId": "AAEC8FDE-1BAE-477C-BF27-F136B877DAAE"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if005:*:*:containers:*:*:*", "vulnerable": true, "matchCriteriaId": "D0F5EB0D-CAF6-45BC-967B-472F1C2833D9"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if005:*:*:traditional:*:*:*", "vulnerable": true, "matchCriteriaId": "E2D1C66F-BAA2-414C-A1F0-651526353081"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if006:*:*:containers:*:*:*", "vulnerable": true, "matchCriteriaId": "63C11C87-A5EF-406D-86A5-13B7CB4BBB82"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if006:*:*:traditional:*:*:*", "vulnerable": true, "matchCriteriaId": "5BEFDA15-7D42-48CF-B89C-E72811A796B7"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:-:*:*:containers:*:*:*", "vulnerable": true, "matchCriteriaId": "3058E645-44E1-4FF0-9A97-E04324BB8968"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:-:*:*:traditional:*:*:*", "vulnerable": true, "matchCriteriaId": "EA15073D-EA2F-479E-B7DC-F6280806410E"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if001:*:*:containers:*:*:*", "vulnerable": true, "matchCriteriaId": "0E06ACEC-AC03-41AA-91C7-BA84457847A7"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if001:*:*:traditional:*:*:*", "vulnerable": true, "matchCriteriaId": "D3A28BF1-C38A-4600-BFB5-C4EFD40BEA0B"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if002:*:*:containers:*:*:*", "vulnerable": true, "matchCriteriaId": "6AD427CB-B553-4ACB-B2A3-1648848D6D09"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if002:*:*:traditional:*:*:*", "vulnerable": true, "matchCriteriaId": "03533F96-66A4-430D-B7A2-C77CE6A65B32"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if003:*:*:containers:*:*:*", "vulnerable": true, "matchCriteriaId": "4528EEFE-9EA6-4103-AC2B-581816A4776C"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if003:*:*:traditional:*:*:*", "vulnerable": true, "matchCriteriaId": "DFE51BD6-9AF7-43BE-9EE3-1A16420CBC97"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.1:-:*:*:containers:*:*:*", "vulnerable": true, "matchCriteriaId": "A979D2C3-E177-45A5-A17E-56A595A26A9E"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.1:-:*:*:traditional:*:*:*", "vulnerable": true, "matchCriteriaId": "E9C4DCE5-CE75-44EC-8FC7-AB4B18EDDF6A"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@us.ibm.com"}