Known vulnerabilities in webMethods Managed File Transfer

Vendor: IBM Corporation
Software: webMethods Managed File Transfer
Software CPE: cpe:2.3:a:ibm_corporation:webmethods_managed_file_transfer:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 90
Public exploits: 5
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting webMethods Managed File Transfer webMethods Managed File Transfer is affected by 90 known vulnerabilities: 1 critical, 7 high, 59 medium, 23 low Critical High Medium Low

Vulnerabilities (90)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU116142 - Uncontrolled Recursion
CVE-2025-53864		 CWE-674 Medium
No
No
 11.1 Server Fix2 26.09.2025 SB2025092630
SB2025092631
SB2025100301
and 27 more
#VU114026 - Resource exhaustion
CVE-2025-55163		 CWE-400 Medium
No
No
 11.1 Server Fix2 13.08.2025 SB2025081378
SB2025081948
SB2025081949
and 71 more
#VU106926 - Resource Management Errors
CVE-2024-57699		 CWE-399 Medium
No
No
 11.1 Server Fix2 03.04.2025 SB2025040317
SB2025040325
SB2025040326
and 64 more
#VU103770 - Improper input validation
CVE-2025-24970		 CWE-20 Medium
No
No
 11.1 Server Fix2 11.02.2025 SB2025021186
SB202502197190
SB2025030409
and 88 more
#VU93519 - Out-of-bounds read
CVE-2024-37371		 CWE-125 Medium
No
No
 - 01.07.2024 SB2024070148
SB2024070491
SB2024070496
and 114 more
#VU89624 - Resource Management Errors
CVE-2024-4603		 CWE-399 Low
No
No
 - 17.05.2024 SB2024051715
SB2024052732
SB2024060735
and 65 more
#VU89218 - Resource exhaustion
CVE-2024-29857		 CWE-400 Medium
No
No
 - 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 69 more
#VU88144 - Improper input validation
CVE-2024-28182		 CWE-20 Medium
No
No
 - 04.04.2024 SB2024040442
SB2024040443
SB2024040444
and 124 more
#VU87671 - Cryptographic Issues
CVE-2024-28834		 CWE-310 Medium
No
No
 - 20.03.2024 SB2024032057
SB2024032058
SB2024032059
and 111 more
#VU85874 - Resource exhaustion
CVE-2023-33202		 CWE-400 Medium
No
No
 - 29.01.2024 SB2024012929
SB2024012930
SB2024013106
and 19 more
#VU85623 - Information Exposure Through Timing Discrepancy
CVE-2024-0553		 CWE-208 Medium
No
No
 - 21.01.2024 SB2024012105
SB2024012106
SB2024012234
and 78 more
#VU84540 - Unchecked Return Value
CVE-2023-6918		 CWE-252 Low
No
No
 - 19.12.2023 SB2023121906
SB2023121910
SB2023121911
and 63 more
#VU83316 - Information Exposure Through Timing Discrepancy
CVE-2023-5981		 CWE-208 Medium
No
No
 - 20.11.2023 SB2023112075
SB2023112145
SB2023120164
and 79 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 - 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 651 more
#VU78328 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2023-33201		 CWE-90 Medium
No
No
 - 17.07.2023 SB2023071740
SB2023071742
SB2023071902
and 91 more
#VU77351 - Improper input validation
CVE-2023-29499		 CWE-20 Medium
No
No
 - 15.06.2023 SB2023041955
SB2023061510
SB2023080276
and 35 more
#VU77350 - Resource exhaustion
CVE-2023-32611		 CWE-400 Medium
No
No
 - 15.06.2023 SB2023041955
SB2023061510
SB2023080276
and 31 more
#VU77349 - Resource exhaustion
CVE-2023-32665		 CWE-400 Medium
No
No
 - 15.06.2023 SB2023041955
SB2023061510
SB2023080276
and 31 more
#VU77252 - NULL Pointer Dereference
CVE-2023-2953		 CWE-476 Medium
No
No
 - 13.06.2023 SB2023061366
SB2023061417
SB2023061418
and 59 more
#VU75044 - Uncontrolled Recursion
CVE-2023-1370		 CWE-674 Medium
No
No
 11.1 Server Fix2 12.04.2023 SB2023041258
SB2023041259
SB2023041809
and 130 more


Showing elements 1 - 20 out of 90