XML External Entity Injection Vulnerability in IBM Business Automation Workflow

CVE-2025-13096

What is CVE-2025-13096?

The IBM Business Automation Workflow, both in its containerized and traditional forms, is affected by a vulnerability that allows for XML external entity injection (XXE) when processing XML data. This issue enables a remote attacker to exploit the vulnerable versions to gain access to sensitive information or exhaust memory resources, potentially compromising the integrity of systems that rely on this workflow solution.

References