8.8
Élevée
CVE-2025-36072 IBM webMethods Integration 10.11 through 10.11_Core_Fix22, 10.15 through 10.15_Core_Fix22, and 11.1 through…
Description
IBM webMethods Integration 10.11 through 10.11_Core_Fix22, 10.15 through 10.15_Core_Fix22, and 11.1 through 11.1_Core_Fix6 IBM webMethods Integration allow an authenticated user to execute arbitrary code on the system, caused by the deserialization of untrusted object graphs data.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| webMethods Integration 11.1 | 11.1 → dernières | Pas de correctif indiqué |
| webMethods Integration 10.15 | 10.15 → dernières | Pas de correctif indiqué |
| webMethods Integration 10.11 | 10.11 → dernières | Pas de correctif indiqué |
Autres CVE de webMethods Integration
Les 6 CVE de webMethods Integration →
CVE-2025-36037
IBM webMethods Integration 10.15 and 11.1
is vulnerable to server-side request forgery (SSRF)
5.4
Moyenne
CVE-2025-36202
IBM webMethods Integration 10.15 and 11.1 could allow an authenticated user with required execute Services to execute…
7.5
Élevée
CVE-2024-45074
IBM webMethods Integration 10.15 could allow an authenticated user to traverse directories on the system
6.5
Moyenne
CVE-2024-45075
IBM webMethods Integration 10.15 could allow an authenticated user to create scheduler tasks that would allow them to…
8.8
Élevée