CVE-2026-12730
Estado: AnalizadaBaja (3.8)—
IBM Business Automation Workflow containers and traditional 26.0.0, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1 through 24.0.1 Interim Fix 007, and 24.0.0 through 24.0.0 Interim Fix 009 IBM Business Automation Workflow fails to properly verify that the hostname matches the server certificate potentially allowing connections to an attacker-controlled server.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
- Puntuación base: 3.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.17%
- Percentil entre todas las CVEs puntuadas: 5
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-297
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2026-12730",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2026-12730",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2026-08-05T17:59:02.663931Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "psirt@us.ibm.com",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 3.8,
"attackVector": "NETWORK",
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N",
"integrityImpact": "LOW",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "HIGH",
"confidentialityImpact": "LOW"
},
"impactScore": 2.5,
"exploitabilityScore": 1.2
}
]
},
"affected": [
{
"source": "psirt@us.ibm.com",
"affectedData": [
{
"cpes": [
"cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:26.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:25.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:25.0.0:interim_fix_005:*:*:*:*:*:*",
"cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:24.0.1:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:24.0.1:interim_fix_007:*:*:*:*:*:*",
"cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:24.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:business_automation_workflow_containers_and_traditional:24.0.0:interim_fix_009:*:*:*:*:*:*"
],
"vendor": "IBM",
"product": "Business Automation Workflow containers and traditional",
"versions": [
{
"status": "affected",
"version": "26.0.0"
},
{
"status": "affected",
"version": "25.0.0",
"versionType": "semver",
"lessThanOrEqual": "25.0.0 Interim Fix 005"
},
{
"status": "affected",
"version": "24.0.1",
"versionType": "semver",
"lessThanOrEqual": "24.0.1 Interim Fix 007"
},
{
"status": "affected",
"version": "24.0.0",
"versionType": "semver",
"lessThanOrEqual": "24.0.0 Interim Fix 009"
}
]
}
]
}
],
"published": "2026-08-05T16:16:49.440",
"references": [
{
"url": "https://www.ibm.com/support/pages/node/7282596",
"tags": [
"Vendor Advisory"
],
"source": "psirt@us.ibm.com"
}
],
"vulnStatus": "Analyzed",
"weaknesses": [
{
"type": "Secondary",
"source": "psirt@us.ibm.com",
"description": [
{
"lang": "en",
"value": "CWE-297"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "IBM Business Automation Workflow containers and traditional 26.0.0, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1 through 24.0.1 Interim Fix 007, and 24.0.0 through 24.0.0 Interim Fix 009 IBM Business Automation Workflow fails to properly verify that the hostname matches the server certificate potentially allowing connections to an attacker-controlled server."
}
],
"lastModified": "2026-08-10T19:34:48.890",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:-:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EF29B7C7-5024-4A85-ADE5-D94E9002181D"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:-:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "475B8FBB-09BA-4509-B007-2AA407DCA3B5"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if001:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8464D4F4-1F9A-479B-B689-C6E90BC3AF45"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if001:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6EDAD1E1-BDB8-4B23-AA83-7678355AB5CF"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if002:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0FE0DB1D-5728-4075-BE84-48F06E22FDF5"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if002:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5EF56DFD-48DB-4DA1-9056-A980DC7CA697"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if003:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A4AB37B4-DF91-4DC7-AFB9-107E5B1B2BF6"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if003:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C1711BF6-5F1A-4238-A4D0-C80602B11C49"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if004:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "79318EB6-001D-4D75-952C-87297C90A0C8"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if004:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "11C6C4D0-E200-43E3-A779-ED7BBB057032"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if005:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "38F4B5AC-AC9D-48E7-9EC8-48C086CC62A6"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if005:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "33079C3C-3415-4305-A015-37C46BBB46E4"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if006:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "73BAD8DC-3081-4D07-8E65-7501351DE025"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if006:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "784B6E6A-2F7F-488F-A190-FC6CAE7920F0"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if007:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "87CBC521-DDDD-4D6B-B82F-3D7260CB7C67"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if007:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DC646C5B-D3F9-4B8E-94F2-44F42A17B0B4"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if008:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7675FC59-E23F-4816-B1EF-DB8E1CEA30DD"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if008:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "68F2FFA3-761D-4E58-B1E9-CAC651BF620B"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if009:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1492C2D4-4CB6-4EF3-B64C-31F9A7C8508F"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.0:if009:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F25CC4F0-EAD4-4357-A693-0596DFA77976"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:-:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D5D9EC44-05CE-44FA-AFDE-A4FA326A54F7"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:-:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DCBC0FB0-E803-4CC3-9CDD-9DA0D91EE08F"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if001:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AD2EC4AD-EF47-450F-AA73-8BEE3DADEA1A"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if001:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E3E71BEB-B904-48F3-8665-466ACC9AC1B2"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if002:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0CFCCD13-9342-4D3D-BE9C-ABCA4EA27229"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if002:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C345B5B1-B7B2-401D-A554-B7E3F6FF29B8"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if003:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8F82A13E-F355-4B56-A9ED-9B8D728D95D3"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if003:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0BAEF1EF-59E7-4502-B890-5F89EEE81DCB"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if004:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5797C332-AE9A-40BF-BAA4-7ECDDEAA907C"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if004:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AAEC8FDE-1BAE-477C-BF27-F136B877DAAE"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if005:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D0F5EB0D-CAF6-45BC-967B-472F1C2833D9"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if005:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E2D1C66F-BAA2-414C-A1F0-651526353081"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if006:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "63C11C87-A5EF-406D-86A5-13B7CB4BBB82"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if006:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5BEFDA15-7D42-48CF-B89C-E72811A796B7"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if007:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A1E48A02-67B2-46D0-A693-EF289F6EA410"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:24.0.1:if007:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B7C132CE-5918-475C-9CB0-686C7A916D7B"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:-:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3058E645-44E1-4FF0-9A97-E04324BB8968"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:-:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EA15073D-EA2F-479E-B7DC-F6280806410E"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if001:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0E06ACEC-AC03-41AA-91C7-BA84457847A7"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if001:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D3A28BF1-C38A-4600-BFB5-C4EFD40BEA0B"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if002:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6AD427CB-B553-4ACB-B2A3-1648848D6D09"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if002:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "03533F96-66A4-430D-B7A2-C77CE6A65B32"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if003:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4528EEFE-9EA6-4103-AC2B-581816A4776C"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if003:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DFE51BD6-9AF7-43BE-9EE3-1A16420CBC97"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if004:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "102DB0FF-47B9-4CCF-A490-CD511F9B93BE"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if004:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "23475BA8-BE2F-4A92-A1E0-19581FD5AB95"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if005:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CC9713AA-5648-4E7C-8EC1-A7065C52D03C"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:25.0.0:if005:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "72F30A37-91E3-44D4-A185-E9DFA550FEEC"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:26.0.0:-:*:*:containers:*:*:*",
"vulnerable": true,
"matchCriteriaId": "74C81C62-F323-4E91-9169-E4C114649B78"
},
{
"criteria": "cpe:2.3:a:ibm:business_automation_workflow:26.0.0:-:*:*:traditional:*:*:*",
"vulnerable": true,
"matchCriteriaId": "74599AD8-9ECD-44FB-B63E-7EDC41B11F65"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "psirt@us.ibm.com"
}