Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
IBM Business Automation Workflow containers V25.0.0 through V25.0.0-IF007, V24.0.1 - V24.0.1-IF007, V24.0.0 - V24.0.0-IF007 and IBM Business Automation Workflow traditional V25.0.0, V24.0.1, V24.0.0 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
3 versions affected across 1 product
| Date | Total | Labels |
|---|
| 2026-02-02 | 1 | Disclosure1 |
| 2026-03-02 | 1 | General1 |
| 2026-05-28 | 1 | Disclosure1 |
🔴 #IBM Business Automation Workflow, XML External Entity Injection (XXE), #CVE-2025-13096 (High) -DC-May2026-5 https://dailycve.com/ibm-business-automation-workflow-xml-external-entity-injection-xxe-cve-2025-13096-high-dc-may2026-5/
Post summary
The tweet announces CVE-2025-13096, an XXE vulnerability in IBM Business Automation Workflow, noting its high severity but providing no PoC, exploit, patch, or active exploitation details.
📌 Top CVEs recientes (CVSS>=7.0): 1. 🛡️ CVE-2026-25221 (CVSS: 8.1) 2. ⚠️ CVE-2026-25134 (CVSS: 8.8) 3. ⚠️ CVE-2026-23515 (CVSS: 9.9) 4. 🕷️ CVE-2025-13096 (CVSS: 7.1) 5. ⚠️ CVE-2026-22229 (CVSS: 7.2) #CyberSecurity #CVE #Infosec
Post summary
The text lists several recent CVEs with high CVSS scores but provides no additional details on exploitation, patches, or technical specifics.
CVE-2025-13096 IBM Business Automation Workflow containers V25.0.0 through V25.0.0-IF007, V24.0.1 - V24.0.1-IF007, V24.0.0 - V24.0.0-IF007 and IBM Business Automation Workflow tradi… https://www.cve.org/CVERecord?id=CVE-2025-13096
Post summary
The text provides a basic disclosure of CVE‑2025‑13096, listing affected IBM Business Automation Workflow versions and linking to the official CVE record.
17 of 17 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | ibm | business_automation_workflow | - | - | - |
| App | ibm | business_automation_workflow | - | - | - |
| App | ibm | business_automation_workflow | 24.0.0 | - | - |
| App | ibm | business_automation_workflow | 24.0.0 | - | - |
| App | ibm | business_automation_workflow | 24.0.0 | - | - |
| App | ibm | business_automation_workflow | 24.0.0 | - | - |
| App | ibm | business_automation_workflow | 24.0.0 | - | - |
| App | ibm | business_automation_workflow | 24.0.0 | - | - |
| App | ibm | business_automation_workflow | 24.0.0 | - | - |
| App | ibm | business_automation_workflow | 24.0.1 | - | - |
| App | ibm | business_automation_workflow | 24.0.1 | - | - |
| App | ibm | business_automation_workflow | 24.0.1 | - | - |
| App | ibm | business_automation_workflow | 24.0.1 | - | - |
| App | ibm | business_automation_workflow | 24.0.1 | - | - |
| App | ibm | business_automation_workflow | 25.0.0 | - | - |
| App | ibm | business_automation_workflow | 25.0.0 | - | - |
| App | ibm | business_automation_workflow | 25.0.0 | - | - |