8.8
High
CVE-2025-36072 IBM webMethods Integration 10.11 through 10.11_Core_Fix22, 10.15 through 10.15_Core_Fix22, and 11.1 through…
Description
IBM webMethods Integration 10.11 through 10.11_Core_Fix22, 10.15 through 10.15_Core_Fix22, and 11.1 through 11.1_Core_Fix6 IBM webMethods Integration allow an authenticated user to execute arbitrary code on the system, caused by the deserialization of untrusted object graphs data.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| webMethods Integration 11.1 | 11.1 → latest | No fix stated |
| webMethods Integration 10.15 | 10.15 → latest | No fix stated |
| webMethods Integration 10.11 | 10.11 → latest | No fix stated |
Other CVEs of webMethods Integration
The 6 CVEs of webMethods Integration →
CVE-2025-36037
IBM webMethods Integration 10.15 and 11.1
is vulnerable to server-side request forgery (SSRF)
5.4
Medium
CVE-2025-36202
IBM webMethods Integration 10.15 and 11.1 could allow an authenticated user with required execute Services to execute…
7.5
High
CVE-2024-45074
IBM webMethods Integration 10.15 could allow an authenticated user to traverse directories on the system
6.5
Medium
CVE-2024-45075
IBM webMethods Integration 10.15 could allow an authenticated user to create scheduler tasks that would allow them to…
8.8
High