5.4
Medium
CVE-2025-36037 IBM webMethods Integration 10.15 and 11.1 is vulnerable to server-side request forgery (SSRF)
Description
IBM webMethods Integration 10.15 and 11.1 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| webMethods Integration | 11.1 | No fix stated |
| webMethods Integration | 10.15 | No fix stated |
Other CVEs of webMethods Integration
The 6 CVEs of webMethods Integration →
CVE-2025-36072
IBM webMethods Integration 10.11 through 10.11_Core_Fix22, 10.15 through 10.15_Core_Fix22, and 11.1 through…
8.8
High
CVE-2025-36202
IBM webMethods Integration 10.15 and 11.1 could allow an authenticated user with required execute Services to execute…
7.5
High
CVE-2024-45074
IBM webMethods Integration 10.15 could allow an authenticated user to traverse directories on the system
6.5
Medium
CVE-2024-45075
IBM webMethods Integration 10.15 could allow an authenticated user to create scheduler tasks that would allow them to…
8.8
High