Known vulnerabilities in webMethods BPM 12.1
Vendor:
IBM Corporation
Software:
webMethods BPM
Version:
12.1
Software CPE:
cpe:2.3:a:ibm_corporation:webmethods_bpm:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
4
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
6.9
Vulnerabilities by Severity
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU128400 - Improper Output Neutralization for Logs CVE-2026-34478 |
CWE-117 | Medium | 10.15 Fix 2, 11.1 Fix 2, 12.1 Fix 1 | 28.04.2026 |
SB20260428217 SB2026052632 SB2026052731 and 12 more |
||
| #VU128399 - Improper Certificate Validation CVE-2026-34477 |
CWE-295 | Medium | 10.15 Fix 2, 11.1 Fix 2, 12.1 Fix 1 | 28.04.2026 |
SB20260428217 SB20260513128 SB2026052632 and 15 more |
||
| #VU120231 - Improper Validation of Certificate with Host Mismatch CVE-2025-68161 |
CWE-297 | Medium | 10.15 Fix 2, 11.1 Fix 2, 12.1 Fix 1 | 22.12.2025 |
SB2025122245 SB2026012084 SB2026012087 and 98 more |
||
| #VU86800 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2023-4218 |
CWE-611 | Low | 12.1 Fix 1 | 26.02.2024 |
SB2024022642 SB2024030105 SB2024032906 and 11 more |