IBM webMethods Integration 11.1
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:webmethods_integration:11.1:*:*:*:*:*:*:*
part: a version: 11.1 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Webmethods Integration (33585f5d-7c8f-5a88-a9a2-74993519602f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-36202 |
vulnerable | 2026-06-08 07:21:01.458228 |
IBM webMethods Integration code execution
HIGH (7.5)
IBM webMethods Integration 10.15 and 11.1 could allow an authenticated user with required execute Services to execute commands on the system due to the improper validation of format string strings passed as an argument from an external source.
Published: 2025-09-22T15:14:44.349Z
Updated: 2025-09-22T15:42:51.190Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36072 |
vulnerable | 2026-06-08 07:21:00.857707 |
IBM webMethods Integration Deserialization
HIGH (8.8)
IBM webMethods Integration 10.11 through 10.11_Core_Fix22, 10.15 through 10.15_Core_Fix22, and 11.1 through 11.1_Core_Fix6 IBM webMethods Integration allow an authenticated user to execute arbitrary code on the system, caused by the deserialization of untrusted object graphs data.
Published: 2025-11-20T22:09:42.477Z
Updated: 2025-11-21T15:51:57.885Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36037 |
vulnerable | 2026-06-08 07:21:00.552178 |
IBM webMethods Integration server-side request forgery
MEDIUM (5.4)
IBM webMethods Integration 10.15 and 11.1
is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
Published: 2025-09-22T15:17:10.663Z
Updated: 2025-09-22T15:40:55.670Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.