Known vulnerabilities in webMethods API Gateway 11.1 Fix1

Vendor: IBM Corporation
Software: webMethods API Gateway
Version: 11.1 Fix1
Software CPE: cpe:2.3:a:ibm_corporation:webmethods_api_gateway:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 13
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting webMethods API Gateway version 11.1 Fix1 webMethods API Gateway 11.1 Fix1 is affected by 13 vulnerabilities: 1 high, 10 medium, 2 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU149011 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-54265		 CWE-79 Medium
No
No
 11.1 Fix13 11.09.2026 SB2026091147
SB2026100514
#VU149006 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-50557		 CWE-79 Medium
No
No
 11.1 Fix13 11.09.2026 SB2026082072
SB2026100514
#VU149005 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-50556		 CWE-79 Medium
No
No
 11.1 Fix13 11.09.2026 SB2026091146
SB2026100513
#VU149000 - Origin Validation Error
CVE-2026-50168		 CWE-346 High
No
No
 11.1 Fix13 11.09.2026 SB2026082073
SB2026100513
#VU145069 - Interpretation Conflict
CVE-2026-75931		 CWE-436 Medium
No
No
 11.1 Fix13 25.08.2026 SB2026082529
SB2026090810
SB2026092955
and 2 more
#VU145068 - Double Decoding of the Same Data
CVE-2026-75899		 CWE-174 Medium
No
No
 11.1 Fix13 25.08.2026 SB2026082529
SB2026090810
SB2026091636
and 6 more
#VU145066 - Server-Side Request Forgery (SSRF)
CVE-2026-75975		 CWE-918 Medium
No
No
 11.1 Fix13 25.08.2026 SB2026082529
SB2026090810
SB2026091636
and 7 more
#VU145064 - Improper Handling of URL Encoding (Hex Encoding)
CVE-2026-76172		 CWE-177 Medium
No
No
 11.1 Fix13 25.08.2026 SB2026082529
SB2026090810
SB2026091636
and 7 more
#VU140701 - Interpretation Conflict
CVE-2026-18446		 CWE-436 Medium
No
No
 11.1 Fix13 01.08.2026 SB2026080119
SB2026083172
SB2026083174
and 6 more
#VU140087 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-69149		 CWE-79 Low
No
No
 11.1 Fix13 30.07.2026 SB2026073018
SB2026100513
#VU140085 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-69151		 CWE-79 Low
No
No
 11.1 Fix13 30.07.2026 SB2026073016
SB2026090808
SB2026091022
and 1 more
#VU139083 - Interpretation Conflict
CVE-2026-6322		 CWE-436 Medium
No
No
 11.1 Fix13 22.07.2026 SB2026072227
SB2026072231
SB2026072232
and 18 more
#VU139081 - Interpretation Conflict
CVE-2026-16221		 CWE-436 Medium
No
No
 11.1 Fix13 22.07.2026 SB2026072226
SB2026083172
SB2026083174
and 6 more