7.5
Élevée
CVE-2025-36202 IBM webMethods Integration 10.15 and 11.1 could allow an authenticated user with required execute Services to execute…
Description
IBM webMethods Integration 10.15 and 11.1 could allow an authenticated user with required execute Services to execute commands on the system due to the improper validation of format string strings passed as an argument from an external source.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| webMethods Integration | 11.1 | Pas de correctif indiqué |
| webMethods Integration | 10.15 | Pas de correctif indiqué |
Autres CVE de webMethods Integration
Les 6 CVE de webMethods Integration →
CVE-2025-36072
IBM webMethods Integration 10.11 through 10.11_Core_Fix22, 10.15 through 10.15_Core_Fix22, and 11.1 through…
8.8
Élevée
CVE-2025-36037
IBM webMethods Integration 10.15 and 11.1
is vulnerable to server-side request forgery (SSRF)
5.4
Moyenne
CVE-2024-45074
IBM webMethods Integration 10.15 could allow an authenticated user to traverse directories on the system
6.5
Moyenne
CVE-2024-45075
IBM webMethods Integration 10.15 could allow an authenticated user to create scheduler tasks that would allow them to…
8.8
Élevée