Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:webmethods:11.1:*:*:*:*:*:*:*

part: a version: 11.1 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductWebmethods (861cc2ed-9e37-5056-a790-c38c947af8f1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-36202 vulnerable 2026-06-08 07:21:01.457933 IBM webMethods Integration code execution
HIGH (7.5)
IBM webMethods Integration 10.15 and 11.1 could allow an authenticated user with required execute Services to execute commands on the system due to the improper validation of format string strings passed as an argument from an external source.
Published: 2025-09-22T15:14:44.349Z
Updated: 2025-09-22T15:42:51.190Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36037 vulnerable 2026-06-08 07:21:00.550543 IBM webMethods Integration server-side request forgery
MEDIUM (5.4)
IBM webMethods Integration 10.15 and 11.1 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
Published: 2025-09-22T15:17:10.663Z
Updated: 2025-09-22T15:40:55.670Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.