Threats tagged 'ghsa-jw8h-7ccv-vq64'

IBM Business Automation Workflow containers and traditional deployments may use programming model artifacts that are vulnerable to XML Entity Injection (XXE) attacks by default. This vulnerability can allow an attacker with network access and low privileges to cause high confidentiality impact and low availability impact. The vulnerability is identified as CVE-2026-13107 with a CVSS score of 7.1 (high severity). No specific affected versions or patch information is provided.