IBM Webmethods Integration

9 CVEs affecting IBM Webmethods Integration. Latest disclosed: 2026-07-30. Critical: 2, High: 5.

Top CVEs affecting IBM Webmethods Integration
CVESeverityScorePublishedSummary
CVE-2024-45076Critical9.92024-09-04IBM webMethods Integration 10.15 could allow an authenticated user to upload and execute arbitrary files which could be executed on the underlying operating sy…
CVE-2026-12118Critical9.82026-07-30IBM webMethods Integration (on prem) 10.15, 10.11 could allow an unauthenticated remote attacker to execute arbitrary code on the system due to the deserializa…
CVE-2025-36072High8.82025-11-20IBM webMethods Integration 10.11 through 10.11_Core_Fix22, 10.15 through 10.15_Core_Fix22, and 11.1 through 11.1_Core_Fix6 IBM webMethods Integration allow an…
CVE-2025-36049High8.82025-06-18IBM webMethods Integration Server 10.5, 10.7, 10.11, and 10.15 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A rem…
CVE-2024-45075High8.82024-09-04IBM webMethods Integration 10.15 could allow an authenticated user to create scheduler tasks that would allow them to escalate their privileges to administrato…
CVE-2025-36202High7.52025-09-22IBM webMethods Integration 10.15 and 11.1 could allow an authenticated user with required execute Services to execute commands on the system due to the imprope…
CVE-2025-36048High7.22025-06-18IBM webMethods Integration Server 10.5, 10.7, 10.11, and 10.15 could allow a privileged user to escalate their privileges when handling external entities due t…
CVE-2024-45074Medium6.52024-09-04IBM webMethods Integration 10.15 could allow an authenticated user to traverse directories on the system. An attacker could send a specially crafted URL reques…
CVE-2025-36037Medium5.42025-09-22IBM webMethods Integration 10.15 and 11.1 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized…