Webmethods Integration (Ibm) - vulnerabilities (CVEs)
9 CVEs, 0 in the last 30 days, 8 known versions, newest CVE from 2026-07-30. Vendor: Ibm.
CVEs of Webmethods Integration
- CVE-2026-12118 - CVSS 9.8 (critical), 2026-07-30: IBM webMethods Integration (on prem) 10.15, 10.11 could allow an unauthenticated remote attacker to execute arbitrary code on the system due to the…
- CVE-2025-36072 - CVSS 8.8 (high), 2025-11-20: IBM webMethods Integration 10.11 through 10.11_Core_Fix22, 10.15 through 10.15_Core_Fix22, and 11.1 through 11.1_Core_Fix6 IBM webMethods Integration allow an…
- CVE-2025-36202 - CVSS 8.8 (high), 2025-09-22: IBM webMethods Integration 10.15 and 11.1 could allow an authenticated user with required execute Services to execute commands on the system due to the…
- CVE-2025-36037 - CVSS 5.4 (medium), 2025-09-22: IBM webMethods Integration 10.15 and 11.1 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized…
- CVE-2025-36049 - CVSS 8.8 (high), 2025-06-18: IBM webMethods Integration Server 10.5, 10.7, 10.11, and 10.15 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A…
- CVE-2025-36048 - CVSS 7.2 (high), 2025-06-18: IBM webMethods Integration Server 10.5, 10.7, 10.11, and 10.15 could allow a privileged user to escalate their privileges when handling external entities due…
- CVE-2024-45075 - CVSS 8.8 (high), 2024-09-04: IBM webMethods Integration 10.15 could allow an authenticated user to create scheduler tasks that would allow them to escalate their privileges to…
- CVE-2024-45074 - CVSS 6.5 (medium), 2024-09-04: IBM webMethods Integration 10.15 could allow an authenticated user to traverse directories on the system. An attacker could send a specially crafted URL…
- CVE-2024-45076 - CVSS 9.9 (critical), 2024-09-04: IBM webMethods Integration 10.15 could allow an authenticated user to upload and execute arbitrary files which could be executed on the underlying operating…
