QSearchQSearch

CVE-2026-1248

4.3 MEDIUM

IBM Business Automation Workflow containers and traditional may leak information about its database structure in error messages

Published: 2026-05-27 · Last updated: 2026-05-28

Severity and scoring

CVSS
4.3 MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CWE
CWE-209

Affected products

VendorProduct
ibmbusiness_automation_workflow

Description

IBM Business Automation Workflow containers and traditional may leak information about its database structure in error messages.

Source: NVD

References

Related CVEs

Same vendor

  • CVE-2026-9330 — IBM WebSphere Application Server 9.0, and 8.5 is affected by an improper validation of user-supplied data during deserialization using th... (8.5 HIGH)
  • CVE-2026-9319 — IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to potential remote code execution due to deserialization of untrusted data v... (9.0 CRITICAL)
  • CVE-2026-9311 — IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to remote code execution caused by the bypass of security controls (9.0 CRITICAL)
  • CVE-2026-8644 — IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to identity spoofing (9.1 CRITICAL)
  • CVE-2026-9035 — IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix ... (6.5 MEDIUM)

Same CWE

  • CVE-2026-41730 — Spring Data REST serializes the full exception cause chain into HTTP error response bodies, potentially exposing persistence-layer intern... (5.3 MEDIUM)
  • CVE-2025-52611 — HCL iControl v4.0.0 was affected by Unhandled Exception - Stack Trace Disclosure vulnerability (3.1 LOW)
  • CVE-2025-52606 — HCL iControl was affected by Weak Input Validation vulnerability (4.3 MEDIUM)
  • CVE-2026-9794 — A flaw was found in Keycloak (5.3 MEDIUM)
  • CVE-2026-42459 — free5GC is an open-source implementation of the 5G core network (7.5 HIGH)