What is CVE-2025-14150?

CVE-2025-14150 is a medium-severity vulnerability in Ibm Webmethods Integration (On Prem) - Server, classified under Exposure of Sensitive System Information to an Unauthorized Control Sphere. CVSS score: 6.5/10. Published 2026-02-05.

How severe is CVE-2025-14150?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Ibm Webmethods Integration (On Prem) - Server

CVE-2025-14150

IBM webMethods Integration (on prem) - Integration Server 10.15 through IS_10.15_Core_Fix2411.1 to IS_11.1_Core_Fix8 IBM webMethods Integration could disclose sensitive user information in server responses.

EPSS: 0.003 (24.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Ibm Webmethods Integration (On Prem) - Server — versions 10.15

Weakness classification (CWE)

CWE-497 — Exposure of Sensitive System Information to an Unauthorized Control Sphere

References

psirt@us.ibm.com (vendor-advisory, patch)

Frequently asked questions

What is CVE-2025-14150?: CVE-2025-14150 is a medium-severity vulnerability in Ibm Webmethods Integration (On Prem) - Server, classified under Exposure of Sensitive System Information to an Unauthorized Control Sphere. CVSS score: 6.5/10. Published 2026-02-05.
How severe is CVE-2025-14150?: Medium severity. CVSS v3 base score is 6.5 out of 10.