Known vulnerabilities in webMethods BPM - page 3

Vendor: IBM Corporation
Software: webMethods BPM
Software CPE: cpe:2.3:a:ibm_corporation:webmethods_bpm:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 60
Public exploits: 8
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting webMethods BPM webMethods BPM is affected by 60 known vulnerabilities: 1 critical, 2 high, 47 medium, 10 low Critical High Medium Low

Vulnerabilities (60)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121014 - Resource exhaustion
CVE-2025-8885		 CWE-400 Medium
No
No
 10.15 Fix 25, 11.1 Fix 7 07.01.2026 SB2024050731
SB2026010745
SB2026010827
and 10 more
#VU114024 - Resource exhaustion
CVE-2025-48989		 CWE-400 Medium
No
No
 10.15 Fix 14, 11.1 Fix 2 13.08.2025 SB2025081375
SB2025081376
SB20250820127
and 49 more
#VU112276 - Resource exhaustion
CVE-2025-53506		 CWE-400 Medium
No
No
 10.15 Fix 14, 11.1 Fix 2 04.07.2025 SB20250704167
SB2025072535
SB2025072536
and 41 more
#VU112274 - Improper input validation
CVE-2025-52434		 CWE-20 Medium
No
No
 10.15 Fix 14, 11.1 Fix 2 04.07.2025 SB20250704167
SB2025072535
SB2025072536
and 32 more
#VU111162 - Resource exhaustion
CVE-2025-48976		 CWE-400 Medium
Available
No
 10.15 Fix 14, 11.1 Fix 2 16.06.2025 SB2025061634
SB2025061635
SB2025061927
and 157 more
#VU108837 - Improper Resource Shutdown or Release
CVE-2024-13009		 CWE-404 Medium
No
No
 10.15 Fix 15, 11.1 Fix 3 09.05.2025 SB2025050925
SB2025052987
SB2025060616
and 22 more
#VU107996 - Error Handling
CVE-2025-31650		 CWE-388 Medium
Available
No
 10.15 Fix 14, 11.1 Fix 2 28.04.2025 SB2025042851
SB2025050943
SB2025050982
and 38 more
#VU100780 - Exposure of sensitive information to an unauthorized actor
CVE-2024-31141		 CWE-200 Medium
No
No
 11.1 Fix 9 21.11.2024 SB2024112150
SB2024120226
SB2024120331
and 34 more
#VU83545 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2022-46337		 CWE-90 High
No
No
 11.1 Fix 2 28.11.2023 SB2023112861
SB2024011806
SB2024020107
and 34 more
#VU82454 - Allocation of Resources Without Limits or Throttling
CVE-2023-43642		 CWE-770 Medium
No
No
 11.1 Fix 9 26.10.2023 SB2023102621
SB2023102628
SB2023103020
and 63 more
#VU82276 - Allocation of Resources Without Limits or Throttling
CVE-2023-5072		 CWE-770 Medium
No
No
 11.1 Fix 1 20.10.2023 SB2023102017
SB2023102018
SB2023113056
and 97 more
#VU82122 - Improper input validation
CVE-2023-35116		 CWE-20 Low
No
No
 11.1 Fix 1 17.10.2023 SB2023101771
SB20231018117
SB2023101925
and 45 more
#VU77362 - Resource exhaustion
CVE-2023-34455		 CWE-400 Medium
No
No
 11.1 Fix 9 15.06.2023 SB2023061517
SB2023071708
SB2023072511
and 48 more
#VU77361 - Integer overflow
CVE-2023-34454		 CWE-190 Medium
No
No
 11.1 Fix 9 15.06.2023 SB2023061517
SB2023071708
SB2023072511
and 39 more
#VU77359 - Integer overflow
CVE-2023-34453		 CWE-190 Medium
No
No
 11.1 Fix 9 15.06.2023 SB2023061517
SB2023071708
SB2023072511
and 40 more
#VU77102 - Stack-based buffer overflow
CVE-2022-45688		 CWE-121 Medium
No
No
 11.1 Fix 1 08.06.2023 SB2023060836
SB2023060927
SB2023071959
and 35 more
#VU72123 - Deserialization of Untrusted Data
CVE-2023-25194		 CWE-502 Low
Available
No
 11.1 Fix 9 11.02.2023 SB2023021101
SB2023030952
SB2023040419
and 40 more
#VU68832 - Resource exhaustion
CVE-2022-42004		 CWE-400 Medium
No
No
 11.1 Fix 1 31.10.2022 SB2022103116
SB2022103117
SB2022111404
and 122 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 11.1 Fix 1 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU67489 - Resource exhaustion
CVE-2022-34917		 CWE-400 Medium
No
No
 11.1 Fix 9 20.09.2022 SB2022092020
SB2022100556
SB2022110304
and 21 more


Showing elements 41 - 60 out of 60