6.5
Medium
CVE-2024-45074 IBM webMethods Integration 10.15 could allow an authenticated user to traverse directories on the system
Description
IBM webMethods Integration 10.15 could allow an authenticated user to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| webMethods Integration | 10.15 | No fix stated |
Other CVEs of webMethods Integration
The 6 CVEs of webMethods Integration →
CVE-2025-36072
IBM webMethods Integration 10.11 through 10.11_Core_Fix22, 10.15 through 10.15_Core_Fix22, and 11.1 through…
8.8
High
CVE-2025-36037
IBM webMethods Integration 10.15 and 11.1
is vulnerable to server-side request forgery (SSRF)
5.4
Medium
CVE-2025-36202
IBM webMethods Integration 10.15 and 11.1 could allow an authenticated user with required execute Services to execute…
7.5
High
CVE-2024-45075
IBM webMethods Integration 10.15 could allow an authenticated user to create scheduler tasks that would allow them to…
8.8
High