CVE-2026-1248
Estado: AnalizadaMedia (4.3)—
IBM Business Automation Workflow containers and traditional may leak information about its database structure in error messages.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- Puntuación base: 4.3
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.22%
- Percentil entre todas las CVEs puntuadas: 11
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-209
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2026-1248",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2026-1248",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2026-05-27T16:17:58.791902Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 4.3,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "LOW",
"confidentialityImpact": "LOW"
},
"impactScore": 1.4,
"exploitabilityScore": 2.8
}
]
},
"affected": [
{
"source": "psirt@us.ibm.com",
"affectedData": [
{
"cpes": [
"cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:25.0.1:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:25.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:25.0.0:interim_fix_003:*:*:*:*:*:*",
"cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:24.0.1:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:24.0.1:interim_fix_006:*:*:*:*:*:*",
"cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:24.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:24.0.0:interim_fix_008:*:*:*:*:*:*"
],
"vendor": "IBM",
"product": "Business Automation Workflow containers and traditional",
"versions": [
{
"status": "affected",
"version": "25.0.1"
},
{
"status": "affected",
"version": "25.0.0",
"versionType": "semver",
"lessThanOrEqual": "25.0.0 Interim Fix 003"
},
{
"status": "affected",
"version": "24.0.1",
"versionType": "semver",
"lessThanOrEqual": "24.0.1 Interim Fix 006"
},
{
"status": "affected",
"version": "24.0.0",
"versionType": "semver",
"lessThanOrEqual": "24.0.0 Interim Fix 008"
}
]
}
]
}
],
"published": "2026-05-27T15:16:24.920",
"references": [
{
"url": "https://www.ibm.com/support/pages/node/7271445",
"tags": [
"Vendor Advisory"
],
"source": "psirt@us.ibm.com"
}
],
"vulnStatus": "Analyzed",
"weaknesses": [
{
"type": "Secondary",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"description": [
{
"lang": "en",
"value": "CWE-209"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "IBM Business Automation Workflow containers and traditional may leak information about its database structure in error messages."
}
],
"lastModified": "2026-06-17T10:15:23.547",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:-:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EF29B7C7-5024-4A85-ADE5-D94E9002181D"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:-:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "475B8FBB-09BA-4509-B007-2AA407DCA3B5"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if001:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8464D4F4-1F9A-479B-B689-C6E90BC3AF45"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if001:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6EDAD1E1-BDB8-4B23-AA83-7678355AB5CF"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if002:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0FE0DB1D-5728-4075-BE84-48F06E22FDF5"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if002:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5EF56DFD-48DB-4DA1-9056-A980DC7CA697"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if003:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A4AB37B4-DF91-4DC7-AFB9-107E5B1B2BF6"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if003:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C1711BF6-5F1A-4238-A4D0-C80602B11C49"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if004:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "79318EB6-001D-4D75-952C-87297C90A0C8"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if004:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "11C6C4D0-E200-43E3-A779-ED7BBB057032"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if005:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "38F4B5AC-AC9D-48E7-9EC8-48C086CC62A6"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if005:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "33079C3C-3415-4305-A015-37C46BBB46E4"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if006:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "73BAD8DC-3081-4D07-8E65-7501351DE025"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if006:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "784B6E6A-2F7F-488F-A190-FC6CAE7920F0"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if007:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "87CBC521-DDDD-4D6B-B82F-3D7260CB7C67"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if007:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DC646C5B-D3F9-4B8E-94F2-44F42A17B0B4"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if008:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7675FC59-E23F-4816-B1EF-DB8E1CEA30DD"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if008:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "68F2FFA3-761D-4E58-B1E9-CAC651BF620B"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:-:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D5D9EC44-05CE-44FA-AFDE-A4FA326A54F7"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:-:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DCBC0FB0-E803-4CC3-9CDD-9DA0D91EE08F"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if001:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AD2EC4AD-EF47-450F-AA73-8BEE3DADEA1A"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if001:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E3E71BEB-B904-48F3-8665-466ACC9AC1B2"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if002:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0CFCCD13-9342-4D3D-BE9C-ABCA4EA27229"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if002:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C345B5B1-B7B2-401D-A554-B7E3F6FF29B8"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if003:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8F82A13E-F355-4B56-A9ED-9B8D728D95D3"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if003:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0BAEF1EF-59E7-4502-B890-5F89EEE81DCB"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if004:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5797C332-AE9A-40BF-BAA4-7ECDDEAA907C"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if004:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AAEC8FDE-1BAE-477C-BF27-F136B877DAAE"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if005:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D0F5EB0D-CAF6-45BC-967B-472F1C2833D9"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if005:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E2D1C66F-BAA2-414C-A1F0-651526353081"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if006:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "63C11C87-A5EF-406D-86A5-13B7CB4BBB82"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if006:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5BEFDA15-7D42-48CF-B89C-E72811A796B7"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:-:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3058E645-44E1-4FF0-9A97-E04324BB8968"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:-:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EA15073D-EA2F-479E-B7DC-F6280806410E"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if001:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0E06ACEC-AC03-41AA-91C7-BA84457847A7"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if001:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D3A28BF1-C38A-4600-BFB5-C4EFD40BEA0B"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if002:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6AD427CB-B553-4ACB-B2A3-1648848D6D09"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if002:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "03533F96-66A4-430D-B7A2-C77CE6A65B32"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if003:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4528EEFE-9EA6-4103-AC2B-581816A4776C"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if003:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DFE51BD6-9AF7-43BE-9EE3-1A16420CBC97"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.1:-:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A979D2C3-E177-45A5-A17E-56A595A26A9E"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.1:-:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E9C4DCE5-CE75-44EC-8FC7-AB4B18EDDF6A"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "psirt@us.ibm.com"
}