Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2025-36049

IBM webMethods Integration Sever XML external entity injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ibm

Description

IBM webMethods Integration Server 10.5, 10.7, 10.11, and 10.15 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote authenticated attacker could exploit this vulnerability to execute arbitrary commands.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM webMethods Integration Server

Default version status: unaffected

  • 10.5affected
  • 10.7affected
  • 10.11affected
  • 10.15affected

References