Known vulnerabilities in webMethods Integration Server
Vendor:
IBM Corporation
Software:
webMethods Integration Server
Software CPE:
cpe:2.3:a:ibm_corporation:webmethods_integration_server:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
14
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
IS 11.1 Core Fix1
IS 11.1 Core Fix2
IS 11.1 Core Fix3
IS 11.1 Core Fix4
IS 11.1 Core Fix5
IS 11.1 Core Fix6
IS 11.1 Core Fix7
IS 11.1 Core Fix8
IS 11.1 Core Fix9
11.1
11.1 Fix 1
10.15
10.15 Fix 13
10.15 Fix 12
10.15 Fix 11
10.15 Fix 10
10.15 Fix 9
10.15 Fix 8
10.15 Fix 7
10.15 Fix 6
10.15 Fix 5
10.15 Fix 4
10.15 Fix 3
10.15 Fix 2
10.15 Fix 1
10.15 Fix 14
11.1 Fix 2
10.15 Core Fix22
11.1 Core Fix6
10.15 Core Fix14
10.11 Core Fix11
10.7 Core Fix23
10.5 Core Fix29
10.15 Core Fix11
10.7 Core Fix21
10.5 Core Fix27
11.1 Core Fix2
10.15 Core Fix15
10.11 Core Fix15
10.7 Core Fix24
10.5 Core Fix30
Vulnerabilities (14)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU117680 - Improper Output Neutralization for Logs CVE-2025-55754 |
CWE-117 | Low | 10.15 Fix 14, 11.1 Fix 2 | 27.10.2025 |
SB2025102748 SB20251031122 SB20251031123 and 27 more |
||
| #VU116140 - Server-Side Request Forgery (SSRF) CVE-2025-36037 |
CWE-918 | Low | 10.15 Core Fix22, 11.1 Core Fix6 | 26.09.2025 |
SB2025092629 |
||
| #VU114385 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2025-54988 |
CWE-611 | Medium | IS 11.1 Core Fix9 | 22.08.2025 |
SB2025082219 SB2025083007 SB2025083008 and 31 more |
||
| #VU114059 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2025-4949 |
CWE-611 | High | 11.1 Fix 2 | 14.08.2025 |
SB2025081408 SB2025081409 SB2025081410 and 21 more |
||
| #VU111439 - Execution with Unnecessary Privileges CVE-2025-33224 |
CWE-250 | Medium | 10.5 Core Fix29, 10.7 Core Fix23, 10.11 Core Fix11, 10.15 Core Fix14 | 19.06.2025 |
SB20250619159 |
||
| #VU111436 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2025-33225 |
CWE-611 | Medium | 10.5 Core Fix27, 10.7 Core Fix21, 10.11 Core Fix15, 10.15 Core Fix11 | 19.06.2025 |
SB20250619156 |
||
| #VU82122 - Improper input validation CVE-2023-35116 |
CWE-20 | Low | 11.1 Fix 1 | 17.10.2023 |
SB2023101771 SB20231018117 SB2023101925 and 45 more |
||
| #VU80783 - Incorrect Conversion between Numeric Types CVE-2023-3635 |
CWE-681 | Medium | 11.1 Fix 1 | 14.09.2023 |
SB2023091430 SB2023091528 SB2023100937 and 47 more |
||
| #VU77107 - Incorrect Default Permissions CVE-2023-2976 |
CWE-276 | Low | 10.5 Core Fix30, 10.7 Core Fix24, 10.11 Core Fix15, 10.15 Core Fix15, 11.1 Core Fix2 | 08.06.2023 |
SB2023060849 SB2023071712 SB2023072512 and 157 more |
||
| #VU68832 - Resource exhaustion CVE-2022-42004 |
CWE-400 | Medium | 11.1 Fix 1 | 31.10.2022 |
SB2022103116 SB2022103117 SB2022111404 and 122 more |
||
| #VU68635 - Deserialization of Untrusted Data CVE-2022-42003 |
CWE-502 | Medium | 11.1 Fix 1 | 25.10.2022 |
SB2022102509 SB2022102510 SB2022103117 and 208 more |
||
| #VU60367 - Security Features CVE-2022-24329 |
CWE-254 | Medium | - | 08.02.2022 |
SB2022020805 SB2022042218 SB2022071957 and 13 more |
||
| #VU55164 - Improper input validation CVE-2020-29582 |
CWE-20 | Medium | - | 21.07.2021 |
SB2021072128 SB2022012750 SB2022042257 and 8 more |
||
| #VU50139 - Incorrect Default Permissions CVE-2020-8908 |
CWE-276 | Low | 10.5 Core Fix30, 10.7 Core Fix24, 10.11 Core Fix15, 10.15 Core Fix15, 11.1 Core Fix2 | 11.12.2020 |
SB2020121114 SB2021031707 SB2021042104 and 62 more |