Known vulnerabilities in webMethods BPM - page 3
Vendor:
IBM Corporation
Software:
webMethods BPM
Software CPE:
cpe:2.3:a:ibm_corporation:webmethods_bpm:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
52
Public exploits:
8
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (52)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU114024 - Resource exhaustion CVE-2025-48989 |
CWE-400 | Medium | 10.15 Fix 14, 11.1 Fix 2 | 13.08.2025 |
SB2025081375 SB2025081376 SB20250820127 and 49 more |
||
| #VU112276 - Resource exhaustion CVE-2025-53506 |
CWE-400 | Medium | 10.15 Fix 14, 11.1 Fix 2 | 04.07.2025 |
SB20250704167 SB2025072535 SB2025072536 and 41 more |
||
| #VU112274 - Improper input validation CVE-2025-52434 |
CWE-20 | Medium | 10.15 Fix 14, 11.1 Fix 2 | 04.07.2025 |
SB20250704167 SB2025072535 SB2025072536 and 32 more |
||
| #VU111162 - Resource exhaustion CVE-2025-48976 |
CWE-400 | Medium | 10.15 Fix 14, 11.1 Fix 2 | 16.06.2025 |
SB2025061634 SB2025061635 SB2025061927 and 156 more |
||
| #VU108837 - Improper Resource Shutdown or Release CVE-2024-13009 |
CWE-404 | Medium | 10.15 Fix 15, 11.1 Fix 3 | 09.05.2025 |
SB2025050925 SB2025052987 SB2025060616 and 22 more |
||
| #VU107996 - Error Handling CVE-2025-31650 |
CWE-388 | Medium | 10.15 Fix 14, 11.1 Fix 2 | 28.04.2025 |
SB2025042851 SB2025050943 SB2025050982 and 38 more |
||
| #VU83545 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') CVE-2022-46337 |
CWE-90 | High | 11.1 Fix 2 | 28.11.2023 |
SB2023112861 SB2024011806 SB2024020107 and 34 more |
||
| #VU82276 - Allocation of Resources Without Limits or Throttling CVE-2023-5072 |
CWE-770 | Medium | 11.1 Fix 1 | 20.10.2023 |
SB2023102017 SB2023102018 SB2023113056 and 97 more |
||
| #VU82122 - Improper input validation CVE-2023-35116 |
CWE-20 | Low | 11.1 Fix 1 | 17.10.2023 |
SB2023101771 SB20231018117 SB2023101925 and 45 more |
||
| #VU77102 - Stack-based buffer overflow CVE-2022-45688 |
CWE-121 | Medium | 11.1 Fix 1 | 08.06.2023 |
SB2023060836 SB2023060927 SB2023071959 and 35 more |
||
| #VU68832 - Resource exhaustion CVE-2022-42004 |
CWE-400 | Medium | 11.1 Fix 1 | 31.10.2022 |
SB2022103116 SB2022103117 SB2022111404 and 122 more |
||
| #VU68635 - Deserialization of Untrusted Data CVE-2022-42003 |
CWE-502 | Medium | 11.1 Fix 1 | 25.10.2022 |
SB2022102509 SB2022102510 SB2022103117 and 208 more |
Showing elements 41 - 60 out of 52