XML External Entity Injection Vulnerability in IBM Business Automation Workflow

CVE-2025-13096

What is CVE-2025-13096?

The IBM Business Automation Workflow, both in its containerized and traditional forms, is affected by a vulnerability that allows for XML external entity injection (XXE) when processing XML data. This issue enables a remote attacker to exploit the vulnerable versions to gain access to sensitive information or exhaust memory resources, potentially compromising the integrity of systems that rely on this workflow solution.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References