Known vulnerabilities in webMethods Integration Server

Software CPE: cpe:2.3:a:ibm_corporation:webmethods_integration_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 23
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting webMethods Integration Server webMethods Integration Server is affected by 23 known vulnerabilities: 1 high, 17 medium, 5 low Critical High Medium Low

Vulnerabilities (23)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146454 - Observable discrepancy
CVE-2026-59640
CWE-203 Medium
No
No
10.15 Fix 18, 11.1 Fix 9 31.08.2026 SB2026083171
SB20260831105
SB2026090816
and 1 more
#VU146457 - Protection Mechanism Failure
CVE-2026-59643
CWE-693 Medium
No
No
10.15 Fix 18, 11.1 Fix 9 31.08.2026 SB2026083171
SB20260831105
SB2026091416
#VU146459 - Uncontrolled Recursion
CVE-2026-59645
CWE-674 Medium
No
No
10.15 Fix 18, 11.1 Fix 9 31.08.2026 SB2026083171
SB20260831105
SB2026091409
and 3 more
#VU146462 - Resource exhaustion
CVE-2026-59648
CWE-400 Medium
No
No
10.15 Fix 18, 11.1 Fix 9 31.08.2026 SB2026083171
SB20260831105
SB2026090816
and 3 more
#VU146463 - Uncontrolled Memory Allocation
CVE-2026-59649
CWE-789 Medium
No
No
10.15 Fix 18, 11.1 Fix 9 31.08.2026 SB2026083171
SB20260831105
SB2026090816
and 1 more
#VU146440 - Insufficient Verification of Data Authenticity
CVE-2026-12817
CWE-345 Medium
No
No
10.15 Fix 18, 11.1 Fix 9 31.08.2026 SB2026083171
SB20260831105
SB2026091416
#VU132273 - Incorrect Calculation
CVE-2025-14813
CWE-682 Medium
No
No
12.1 Core Fix1 25.05.2026 SB2026052529
SB2026052540
SB2026052541
and 21 more
#VU132261 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2026-0636
CWE-90 Medium
No
No
12.1 Core Fix1 25.05.2026 SB2026052529
SB2026052531
SB2026052540
and 16 more
#VU132259 - Covert Timing Channel
CVE-2026-5598
CWE-385 Medium
No
No
12.1 Core Fix1 25.05.2026 SB2026052530
SB2026052544
SB2026052931
and 19 more
#VU117680 - Improper Output Neutralization for Logs
CVE-2025-55754
CWE-117 Low
No
No
10.15 Fix 14, 11.1 Fix 2 27.10.2025 SB2025102748
SB20251031122
SB20251031123
and 27 more
#VU116140 - Server-Side Request Forgery (SSRF)
CVE-2025-36037
CWE-918 Low
No
No
10.15 Core Fix22, 11.1 Core Fix6 26.09.2025 SB2025092629
#VU114385 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2025-54988
CWE-611 Medium
Available
Exploited
IS 11.1 Core Fix9 22.08.2025 SB2025082219
SB2025083007
SB2025083008
and 32 more
#VU114059 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2025-4949
CWE-611 High
No
No
11.1 Fix 2 14.08.2025 SB2025081408
SB2025081409
SB2025081410
and 21 more
#VU111439 - Execution with Unnecessary Privileges
CVE-2025-33224
CWE-250 Medium
No
No
10.5 Core Fix29, 10.7 Core Fix23, 10.11 Core Fix11, 10.15 Core Fix14 19.06.2025 SB20250619159
#VU82122 - Improper input validation
CVE-2023-35116
CWE-20 Low
No
No
11.1 Fix 1 17.10.2023 SB2023101771
SB20231018117
SB2023101925
and 45 more
#VU80783 - Incorrect Conversion between Numeric Types
CVE-2023-3635
CWE-681 Medium
No
No
11.1 Fix 1 14.09.2023 SB2023091430
SB2023091528
SB2023100937
and 47 more
#VU68832 - Resource exhaustion
CVE-2022-42004
CWE-400 Medium
No
No
11.1 Fix 1 31.10.2022 SB2022103116
SB2022103117
SB2022111404
and 122 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003
CWE-502 Medium
No
No
11.1 Fix 1 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU60367 - Security Features
CVE-2022-24329
CWE-254 Medium
No
No
- 08.02.2022 SB2022020805
SB2022042218
SB2022071957
and 13 more
#VU55164 - Improper input validation
CVE-2020-29582
CWE-20 Medium
No
No
- 21.07.2021 SB2021072128
SB2022012750
SB2022042257
and 8 more


Showing elements 1 - 20 out of 23