CVE-2026-12730

{"id": "CVE-2026-12730", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-12730", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-05T17:59:02.663931Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@us.ibm.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.8, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "LOW"}, "impactScore": 2.5, "exploitabilityScore": 1.2}]}, "affected": [{"source": "psirt@us.ibm.com", "affectedData": [{"cpes": ["cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:26.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:25.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:25.0.0:interim_fix_005:*:*:*:*:*:*", "cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:24.0.1:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:24.0.1:interim_fix_007:*:*:*:*:*:*", "cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:24.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:24.0.0:interim_fix_009:*:*:*:*:*:*"], "vendor": "IBM", "product": "Business Automation Workflow containers and traditional", "versions": [{"status": "affected", "version": "26.0.0"}, {"status": "affected", "version": "25.0.0", "versionType": "semver", "lessThanOrEqual": "25.0.0 Interim Fix 005"}, {"status": "affected", "version": "24.0.1", "versionType": "semver", "lessThanOrEqual": "24.0.1 Interim Fix 007"}, {"status": "affected", "version": "24.0.0", "versionType": "semver", "lessThanOrEqual": "24.0.0 Interim Fix 009"}]}]}], "published": "2026-08-05T16:16:49.440", "references": [{"url": "https://www.ibm.com/support/pages/node/7282596", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@us.ibm.com", "description": [{"lang": "en", "value": "CWE-297"}]}], "descriptions": [{"lang": "en", "value": "IBM Business Automation Workflow containers and traditional 26.0.0, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1 through 24.0.1 Interim Fix 007, and 24.0.0 through 24.0.0 Interim Fix 009 IBM Business Automation Workflow fails to properly verify that the hostname matches the server certificate potentially allowing connections to an attacker-controlled server."}], "lastModified": "2026-08-10T19:34:48.890", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:-:*:*:containers:*:*:*", "vulnerable": true, "matchCriteriaId": "EF29B7C7-5024-4A85-ADE5-D94E9002181D"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:-:*:*:traditional:*:*:*", "vulnerable": true, "matchCriteriaId": "475B8FBB-09BA-4509-B007-2AA407DCA3B5"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if001:*:*:containers:*:*:*", "vulnerable": true, "matchCriteriaId": "8464D4F4-1F9A-479B-B689-C6E90BC3AF45"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if001:*:*:traditional:*:*:*", "vulnerable": true, "matchCriteriaId": "6EDAD1E1-BDB8-4B23-AA83-7678355AB5CF"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if002:*:*:containers:*:*:*", "vulnerable": true, "matchCriteriaId": "0FE0DB1D-5728-4075-BE84-48F06E22FDF5"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if002:*:*:traditional:*:*:*", "vulnerable": true, "matchCriteriaId": "5EF56DFD-48DB-4DA1-9056-A980DC7CA697"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if003:*:*:containers:*:*:*", "vulnerable": true, "matchCriteriaId": "A4AB37B4-DF91-4DC7-AFB9-107E5B1B2BF6"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if003:*:*:traditional:*:*:*", "vulnerable": true, "matchCriteriaId": "C1711BF6-5F1A-4238-A4D0-C80602B11C49"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if004:*:*:containers:*:*:*", "vulnerable": true, "matchCriteriaId": "79318EB6-001D-4D75-952C-87297C90A0C8"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if004:*:*:traditional:*:*:*", "vulnerable": true, "matchCriteriaId": "11C6C4D0-E200-43E3-A779-ED7BBB057032"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if005:*:*:containers:*:*:*", "vulnerable": true, "matchCriteriaId": "38F4B5AC-AC9D-48E7-9EC8-48C086CC62A6"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if005:*:*:traditional:*:*:*", "vulnerable": true, "matchCriteriaId": "33079C3C-3415-4305-A015-37C46BBB46E4"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if006:*:*:containers:*:*:*", "vulnerable": true, "matchCriteriaId": "73BAD8DC-3081-4D07-8E65-7501351DE025"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if006:*:*:traditional:*:*:*", "vulnerable": true, "matchCriteriaId": "784B6E6A-2F7F-488F-A190-FC6CAE7920F0"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if007:*:*:containers:*:*:*", "vulnerable": true, "matchCriteriaId": "87CBC521-DDDD-4D6B-B82F-3D7260CB7C67"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if007:*:*:traditional:*:*:*", "vulnerable": true, "matchCriteriaId": "DC646C5B-D3F9-4B8E-94F2-44F42A17B0B4"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if008:*:*:containers:*:*:*", "vulnerable": true, "matchCriteriaId": "7675FC59-E23F-4816-B1EF-DB8E1CEA30DD"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if008:*:*:traditional:*:*:*", "vulnerable": true, "matchCriteriaId": "68F2FFA3-761D-4E58-B1E9-CAC651BF620B"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if009:*:*:containers:*:*:*", "vulnerable": true, "matchCriteriaId": "1492C2D4-4CB6-4EF3-B64C-31F9A7C8508F"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if009:*:*:traditional:*:*:*", "vulnerable": true, "matchCriteriaId": "F25CC4F0-EAD4-4357-A693-0596DFA77976"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:-:*:*:containers:*:*:*", "vulnerable": true, "matchCriteriaId": "D5D9EC44-05CE-44FA-AFDE-A4FA326A54F7"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:-:*:*:traditional:*:*:*", "vulnerable": true, "matchCriteriaId": "DCBC0FB0-E803-4CC3-9CDD-9DA0D91EE08F"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if001:*:*:containers:*:*:*", "vulnerable": true, "matchCriteriaId": "AD2EC4AD-EF47-450F-AA73-8BEE3DADEA1A"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if001:*:*:traditional:*:*:*", "vulnerable": true, "matchCriteriaId": "E3E71BEB-B904-48F3-8665-466ACC9AC1B2"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if002:*:*:containers:*:*:*", "vulnerable": true, "matchCriteriaId": "0CFCCD13-9342-4D3D-BE9C-ABCA4EA27229"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if002:*:*:traditional:*:*:*", "vulnerable": true, "matchCriteriaId": "C345B5B1-B7B2-401D-A554-B7E3F6FF29B8"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if003:*:*:containers:*:*:*", "vulnerable": true, "matchCriteriaId": "8F82A13E-F355-4B56-A9ED-9B8D728D95D3"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if003:*:*:traditional:*:*:*", "vulnerable": true, "matchCriteriaId": "0BAEF1EF-59E7-4502-B890-5F89EEE81DCB"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if004:*:*:containers:*:*:*", "vulnerable": true, "matchCriteriaId": "5797C332-AE9A-40BF-BAA4-7ECDDEAA907C"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if004:*:*:traditional:*:*:*", "vulnerable": true, "matchCriteriaId": "AAEC8FDE-1BAE-477C-BF27-F136B877DAAE"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if005:*:*:containers:*:*:*", "vulnerable": true, "matchCriteriaId": "D0F5EB0D-CAF6-45BC-967B-472F1C2833D9"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if005:*:*:traditional:*:*:*", "vulnerable": true, "matchCriteriaId": "E2D1C66F-BAA2-414C-A1F0-651526353081"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if006:*:*:containers:*:*:*", "vulnerable": true, "matchCriteriaId": "63C11C87-A5EF-406D-86A5-13B7CB4BBB82"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if006:*:*:traditional:*:*:*", "vulnerable": true, "matchCriteriaId": "5BEFDA15-7D42-48CF-B89C-E72811A796B7"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if007:*:*:containers:*:*:*", "vulnerable": true, "matchCriteriaId": "A1E48A02-67B2-46D0-A693-EF289F6EA410"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if007:*:*:traditional:*:*:*", "vulnerable": true, "matchCriteriaId": "B7C132CE-5918-475C-9CB0-686C7A916D7B"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:-:*:*:containers:*:*:*", "vulnerable": true, "matchCriteriaId": "3058E645-44E1-4FF0-9A97-E04324BB8968"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:-:*:*:traditional:*:*:*", "vulnerable": true, "matchCriteriaId": "EA15073D-EA2F-479E-B7DC-F6280806410E"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if001:*:*:containers:*:*:*", "vulnerable": true, "matchCriteriaId": "0E06ACEC-AC03-41AA-91C7-BA84457847A7"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if001:*:*:traditional:*:*:*", "vulnerable": true, "matchCriteriaId": "D3A28BF1-C38A-4600-BFB5-C4EFD40BEA0B"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if002:*:*:containers:*:*:*", "vulnerable": true, "matchCriteriaId": "6AD427CB-B553-4ACB-B2A3-1648848D6D09"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if002:*:*:traditional:*:*:*", "vulnerable": true, "matchCriteriaId": "03533F96-66A4-430D-B7A2-C77CE6A65B32"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if003:*:*:containers:*:*:*", "vulnerable": true, "matchCriteriaId": "4528EEFE-9EA6-4103-AC2B-581816A4776C"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if003:*:*:traditional:*:*:*", "vulnerable": true, "matchCriteriaId": "DFE51BD6-9AF7-43BE-9EE3-1A16420CBC97"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if004:*:*:containers:*:*:*", "vulnerable": true, "matchCriteriaId": "102DB0FF-47B9-4CCF-A490-CD511F9B93BE"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if004:*:*:traditional:*:*:*", "vulnerable": true, "matchCriteriaId": "23475BA8-BE2F-4A92-A1E0-19581FD5AB95"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if005:*:*:containers:*:*:*", "vulnerable": true, "matchCriteriaId": "CC9713AA-5648-4E7C-8EC1-A7065C52D03C"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if005:*:*:traditional:*:*:*", "vulnerable": true, "matchCriteriaId": "72F30A37-91E3-44D4-A185-E9DFA550FEEC"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:26.0.0:-:*:*:containers:*:*:*", "vulnerable": true, "matchCriteriaId": "74C81C62-F323-4E91-9169-E4C114649B78"}, {"criteria": "cpe:2.3:a:ibm:business_automation_workflow:26.0.0:-:*:*:traditional:*:*:*", "vulnerable": true, "matchCriteriaId": "74599AD8-9ECD-44FB-B63E-7EDC41B11F65"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@us.ibm.com"}