Threats affecting pkg:maven/com.ibm/business_automation_workflow_containers_and_traditional

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.4	EPSS 0.2%	CVE-2026-12742IBM Business Automation Workflow containers and traditional · Missing Authorization Medium5.4EPSS 0.2%2026-09-15CVE Database V5CVE-2026-12742 IBM Business Automation Workflow containers and traditional could allow an authenticated attacker to trigger restricted import actions due to missing authorization controls. EPSS 0.2%Vulnerability CWE-862	CVE Database V5	2026-09-15
High	7.1	EPSS 0.4%	CVE-2026-13107IBM Business Automation Workflow containers and traditional · XML External Entity (XXE) High7.1EPSS 0.4%2026-09-14CVE Database V5CVE-2026-13107 IBM Business Automation Workflow containers and traditional may use programming model artifacts that are vulnerable to XML Entity Injection attacks by default. EPSS 0.4%Vulnerability CWE-611	CVE Database V5	2026-09-14

Page 1 of 1