Known vulnerabilities in webMethods BPM 11.1 Fix 1

Vendor: IBM Corporation

Software: webMethods BPM

Version: 11.1 Fix 1

Software CPE: cpe:2.3:a:ibm_corporation:webmethods_bpm:*:*:*:*:*:*:*:*

Website: https://www.ibm.com/us-en

Total vulnerabilities: 9

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Vulnerabilities (9)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU123883 - Resource exhaustion CVE-2025-66453	CWE-400	Low	No	No	11.1 Fix 2	11.03.2026	SB2026031137 SB2026031139 SB2026032529 and 4 more
#VU98517 - Resource exhaustion CVE-2024-8184	CWE-400	Medium	No	No	11.1 Fix 6	14.10.2024	SB20241014108 SB2024101836 SB2024112849 and 38 more
#VU98516 - Server-Side Request Forgery (SSRF) CVE-2024-6763	CWE-918	Medium	No	No	11.1 Fix 6	14.10.2024	SB20241014107 SB2024112849 SB2024120517 and 49 more
#VU83545 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') CVE-2022-46337	CWE-90	High	No	No	11.1 Fix 2	28.11.2023	SB2023112861 SB2024011806 SB2024020107 and 34 more
#VU74271 - Resource exhaustion CVE-2012-2098	CWE-400	Medium	No	No	11.1 Fix 9	31.03.2023	SB2012062904 SB2023040315 SB2023040465 and 10 more
#VU54856 - Resource exhaustion CVE-2021-36374	CWE-400	Medium	No	No	11.1 Fix 9	14.07.2021	SB2021071409 SB2021072011 SB2021101927 and 43 more
#VU54855 - Resource exhaustion CVE-2021-36373	CWE-400	Medium	No	No	11.1 Fix 9	14.07.2021	SB2021071409 SB2021072011 SB2022080830 and 16 more
#VU27924 - Incorrect Default Permissions CVE-2020-1945	CWE-276	Low	No	No	11.1 Fix 9	15.05.2020	SB2020051501 SB2020052114 SB2020060205 and 48 more
#VU47428 - Permissions, Privileges, and Access Controls CVE-2020-11979	CWE-264	Low	No	No	11.1 Fix 9	14.05.2020	SB2020100804 SB2020100815 SB2020111614 and 51 more