CVE-2026-12742

5.4 mediumEPSS 0.2%

Medium (5.4). EPSS 0.2% chance of exploitation in the next 30 days.

IBM Business Automation Workflow containers and traditional could allow an authenticated attacker to trigger restricted import actions due to missing authorization controls.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 13% of CVEs (scores of 2026-10-31)
CWE: CWE-862
Published: 2026-09-15
Modified: 2026-09-16
Record from: the NVD, synced 2026-10-19

References

https://www.ibm.com/support/pages/node/7285930

Check your stack JSON