CVE-2025-36048

HIGH 7.2CVE-2025-36048 · Published 18/06/2025 · updated 17/06/2026

In short

CVE-2025-36048 is a HIGH (CVSS 7.2) vulnerability affecting webmethods integration (ibm).
Chance of exploitation in the next 30 days (EPSS): 0.49%, higher than 42.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
webmethods integration ibm	`= 10.11= 10.15= 10.5= 10.7`	No fix yet

Description

IBM webMethods Integration Server 10.5, 10.7, 10.11, and 10.15 could allow a privileged user to escalate their privileges when handling external entities due to execution with unnecessary privileges.

References

ibm.com/support/pages/node/7237144 · Vendor Advisory

More vulnerabilities in webmethods integration

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

webmethods integration

ibm

= 10.11= 10.15= 10.5= 10.7

No fix yet

More vulnerabilities in webmethods integration

See all →