Webmethods (Softwareag) - vulnerabilities (CVEs)

7 CVEs, 0 in the last 30 days, 16 known versions, newest CVE from 2025-06-18. Vendor: Softwareag.

CVEs of Webmethods

• CVE-2025-36049 - CVSS 8.8 (high), 2025-06-18: IBM webMethods Integration Server 10.5, 10.7, 10.11, and 10.15 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A…
• CVE-2025-36048 - CVSS 7.2 (high), 2025-06-18: IBM webMethods Integration Server 10.5, 10.7, 10.11, and 10.15 could allow a privileged user to escalate their privileges when handling external entities due…
• CVE-2024-45076 - CVSS 9.9 (critical), 2024-09-04: IBM webMethods Integration 10.15 could allow an authenticated user to upload and execute arbitrary files which could be executed on the underlying operating…
• CVE-2024-45075 - CVSS 8.8 (high), 2024-09-04: IBM webMethods Integration 10.15 could allow an authenticated user to create scheduler tasks that would allow them to escalate their privileges to…
• CVE-2024-45074 - CVSS 6.5 (medium), 2024-09-04: IBM webMethods Integration 10.15 could allow an authenticated user to traverse directories on the system. An attacker could send a specially crafted URL…
• CVE-2023-6578 - CVSS 7.3 (high), 2023-12-07: A vulnerability classified as critical has been found in Software AG WebMethods 10.11.x/10.15.x. Affected is an unknown function of the file…
• CVE-2023-0925 - CVSS 9.8 (critical), 2023-09-06: Version 10.11 of webMethods OneData runs an embedded instance of Azul Zulu Java 11.0.15 which hosts a Java RMI registry (listening on TCP port 2099 by…