CVE-2026-1248 - IBM Business Automation Workflow information leak

Affected Software

44 affected components

IBM IBM Business Automation Workflow (containers)

IBM IBM Business Automation Workflow (traditional)

IBM Business Automation Workflow=24.0.0

IBM Business Automation Workflow=24.0.0-if001

IBM Business Automation Workflow=24.0.0-if002

IBM Business Automation Workflow=24.0.0-if003

IBM Business Automation Workflow=24.0.0-if004

IBM Business Automation Workflow=24.0.0-if005

IBM Business Automation Workflow=24.0.0-if006

IBM Business Automation Workflow=24.0.0-if007

IBM Business Automation Workflow=24.0.0-if008

IBM Business Automation Workflow=24.0.1

IBM Business Automation Workflow=24.0.1-if001

IBM Business Automation Workflow=24.0.1-if002

IBM Business Automation Workflow=24.0.1-if003

IBM Business Automation Workflow=24.0.1-if004

IBM Business Automation Workflow=24.0.1-if005

IBM Business Automation Workflow=24.0.1-if006

IBM Business Automation Workflow=25.0.0

IBM Business Automation Workflow=25.0.0-if001

IBM Business Automation Workflow=25.0.0-if002

IBM Business Automation Workflow=25.0.0-if003

IBM Business Automation Workflow=25.0.1

Remediation

Information

Affected Product(s)Version(s)Remediation / FixIBM Business Automation Workflow containersV25.0.1Apply container 25.0.1-IF001 https://www.ibm.com/support/pages/readme-ibm-business-automation-workflow-containers-25010-interim-fixes IBM Business Automation Workflow traditionalV25.0.1Apply traditional 25.0.1-IF001 https://www.ibm.com/support/pages/readme-ibm-business-automation-workflow-25010-interim-fixes IBM Business Automation Workflow containersV25.0.0 - V25.0.0-IF003Apply container 25.0.0-IF004 https://www.ibm.com/support/pages/readme-ibm-business-automation-workflow-containers-25000-interim-fixes IBM Business Automation Workflow traditionalV25.0.0 - V25.0.0-IF003Apply traditional 25.0.0-IF004 https://www.ibm.com/support/pages/readme-ibm-business-automation-workflow-25000-interim-fixes IBM Business Automation Workflow containersV24.0.1 - V24.0.1-IF006Apply container 24.0.1-IF007 https://www.ibm.com/support/pages/readme-ibm-business-automation-workflow-containers-24010-interim-fixes IBM Business Automation Workflow traditionalV24.0.1 - V24.0.1-IF006Apply traditional 24.0.1-IF007 https://www.ibm.com/support/pages/readme-ibm-business-automation-workflow-24010-interim-fixes IBM Business Automation Workflow containersV24.0.0 - V24.0.0-IF008Apply container 24.0.0-IF009 https://www.ibm.com/support/pages/readme-ibm-business-automation-workflow-containers-24000-interim-fixes IBM Business Automation Workflow traditionalV24.0.0 - V24.0.0-IF008Apply traditional 24.0.0-IF009 https://www.ibm.com/support/pages/readme-ibm-business-automation-workflow-24000-interim-fixes

Event History

May 27, 2026

CVE Published

via MITRE·02:20 PM

Data Sourced

via MITRE·02:20 PM

RemedyDescription

Data Sourced

via NVD·03:16 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2026-1248?

The severity of CVE-2026-1248 is medium, with a CVSS score of 4.3.

2

How do I fix CVE-2026-1248?

To fix CVE-2026-1248, apply interim fix 25.0.1-IF001 for IBM Business Automation Workflow containers.

3

What information does CVE-2026-1248 leak?

CVE-2026-1248 may leak information about the database structure in error messages.

4

Which versions of IBM Business Automation Workflow are affected by CVE-2026-1248?

CVE-2026-1248 affects IBM Business Automation Workflow version 25.0.1.

5

Are traditional IBM Business Automation Workflow installations affected by CVE-2026-1248?

Yes, both containers and traditional installations of IBM Business Automation Workflow are affected by CVE-2026-1248.

CVE-2026-1248: IBM Business Automation Workflow information leak