7.5
High
CVE-2025-36202 IBM webMethods Integration 10.15 and 11.1 could allow an authenticated user with required execute Services to execute…
Description
IBM webMethods Integration 10.15 and 11.1 could allow an authenticated user with required execute Services to execute commands on the system due to the improper validation of format string strings passed as an argument from an external source.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| webMethods Integration | 11.1 | No fix stated |
| webMethods Integration | 10.15 | No fix stated |
Other CVEs of webMethods Integration
The 6 CVEs of webMethods Integration →
CVE-2025-36072
IBM webMethods Integration 10.11 through 10.11_Core_Fix22, 10.15 through 10.15_Core_Fix22, and 11.1 through…
8.8
High
CVE-2025-36037
IBM webMethods Integration 10.15 and 11.1
is vulnerable to server-side request forgery (SSRF)
5.4
Medium
CVE-2024-45074
IBM webMethods Integration 10.15 could allow an authenticated user to traverse directories on the system
6.5
Medium
CVE-2024-45075
IBM webMethods Integration 10.15 could allow an authenticated user to create scheduler tasks that would allow them to…
8.8
High