Known vulnerabilities in webMethods Managed File Transfer

Vendor: IBM Corporation
Software: webMethods Managed File Transfer
Software CPE: cpe:2.3:a:ibm_corporation:webmethods_managed_file_transfer:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 90
Public exploits: 5
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting webMethods Managed File Transfer webMethods Managed File Transfer is affected by 90 known vulnerabilities: 1 critical, 7 high, 59 medium, 23 low Critical High Medium Low

Vulnerabilities (90)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU116142 - Uncontrolled Recursion
CVE-2025-53864		 CWE-674 Medium
No
No
 11.1 Server Fix2 26.09.2025 SB2025092630
SB2025092631
SB2025100301
and 27 more
#VU114026 - Resource exhaustion
CVE-2025-55163		 CWE-400 Medium
No
No
 11.1 Server Fix2 13.08.2025 SB2025081378
SB2025081948
SB2025081949
and 71 more
#VU106926 - Resource Management Errors
CVE-2024-57699		 CWE-399 Medium
No
No
 11.1 Server Fix2 03.04.2025 SB2025040317
SB2025040325
SB2025040326
and 64 more
#VU103770 - Improper input validation
CVE-2025-24970		 CWE-20 Medium
No
No
 11.1 Server Fix2 11.02.2025 SB2025021186
SB202502197190
SB2025030409
and 88 more
#VU94716 - Out-of-bounds read
CVE-2024-6874		 CWE-125 Medium
No
No
 - 24.07.2024 SB2024072431
SB2024081362
SB2024091242
and 6 more
#VU94715 - Double Free
CVE-2024-6197		 CWE-415 Medium
No
No
 - 24.07.2024 SB2024072431
SB2024080568
SB20240806402
and 11 more
#VU89712 - Stack-based buffer overflow
CVE-2024-33599		 CWE-121 High
No
No
 - 21.05.2024 SB2024052147
SB2024052148
SB2024052305
and 84 more
#VU87852 - Improper Validation of Certificate with Host Mismatch
CVE-2024-2466		 CWE-297 Medium
No
No
 - 27.03.2024 SB2024032713
SB2024032748
SB2024061844
and 14 more
#VU87848 - Improper Certificate Validation
CVE-2024-2379		 CWE-295 Low
No
No
 - 27.03.2024 SB2024032713
SB2024032748
SB2024061844
and 12 more
#VU87846 - Improper input validation
CVE-2024-2004		 CWE-20 Low
No
No
 - 27.03.2024 SB2024032713
SB2024032740
SB2024032748
and 28 more
#VU86900 - Improper input validation
CVE-2024-21742		 CWE-20 Medium
No
No
 - 28.02.2024 SB2024022829
SB2024032934
SB2024042476
and 12 more
#VU85927 - Improper Check for Certificate Revocation
CVE-2024-0853		 CWE-299 Low
No
No
 - 31.01.2024 SB2024013108
SB2024020838
SB2024032231
and 10 more
#VU85268 - Cross-Site Request Forgery (CSRF)
CVE-2023-5455		 CWE-352 Medium
No
No
 - 10.01.2024 SB2024011032
SB2024011039
SB2024011040
and 17 more
#VU84082 - Out-of-bounds write
CVE-2020-19188		 CWE-787 Medium
No
No
 - 11.12.2023 SB2023121144
SB2023121146
SB2023121148
and 5 more
#VU81437 - Memory corruption
CVE-2023-4911		 CWE-119 Low
Available
Exploited
 - 03.10.2023 SB2023100343
SB2023100345
SB2023100402
and 94 more
#VU75141 - Memory corruption
CVE-2023-29491		 CWE-119 Low
No
No
 - 14.04.2023 SB2023041454
SB2023052328
SB2023052346
and 132 more
#VU75044 - Uncontrolled Recursion
CVE-2023-1370		 CWE-674 Medium
No
No
 11.1 Server Fix2 12.04.2023 SB2023041258
SB2023041259
SB2023041809
and 130 more
#VU63553 - Integer overflow
CVE-2021-43618		 CWE-190 Medium
No
No
 - 24.05.2022 SB2021121654
SB2022052401
SB2021120223
and 85 more
#VU57577 - Out-of-bounds write
CVE-2021-39537		 CWE-787 High
No
No
 - 21.10.2021 SB2021102119
SB2022061419
SB2021102025
and 18 more
#VU48269 - Security Features
CVE-2020-17049		 CWE-254 Low
No
No
 - 10.11.2020 SB2020111029
SB2021111015
SB2022121006
and 18 more


Showing elements 1 - 20 out of 90