CVE-2026-1248: IBM Business Automation Workflow information leak
IBM Business Automation Workflow containers and traditional may leak information about its database structure in error messages.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Business Automation Workflow containers and traditionalto a version that resolves this vulnerability.Patch 25.0.1-IF001 - Upgrade
Upgrade
IBM Business Automation Workflow containers and traditionalto a version that resolves this vulnerability.Patch 25.0.0-IF004 - Upgrade
Upgrade
IBM Business Automation Workflow containers and traditionalto a version that resolves this vulnerability.Patch 24.0.1-IF007 - Upgrade
Upgrade
IBM Business Automation Workflow containers and traditionalto a version that resolves this vulnerability.Patch 24.0.0-IF009
Event History
Frequently Asked Questions
What is the severity of CVE-2026-1248?
The severity of CVE-2026-1248 is medium, with a CVSS score of 4.3.
How do I fix CVE-2026-1248?
To fix CVE-2026-1248, apply interim fix 25.0.1-IF001 for IBM Business Automation Workflow containers.
What information does CVE-2026-1248 leak?
CVE-2026-1248 may leak information about the database structure in error messages.
Which versions of IBM Business Automation Workflow are affected by CVE-2026-1248?
CVE-2026-1248 affects IBM Business Automation Workflow version 25.0.1.
Are traditional IBM Business Automation Workflow installations affected by CVE-2026-1248?
Yes, both containers and traditional installations of IBM Business Automation Workflow are affected by CVE-2026-1248.