CVE-2025-36049

HIGH 8.8CVE-2025-36049 · Published 18/06/2025 · updated 17/06/2026

In short

CVE-2025-36049 is a HIGH (CVSS 8.8) vulnerability affecting webmethods integration (ibm).
Chance of exploitation in the next 30 days (EPSS): 0.65%, higher than 51.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
webmethods integration ibm	`= 10.11= 10.15= 10.5= 10.7`	No fix yet

Description

IBM webMethods Integration Server 10.5, 10.7, 10.11, and 10.15 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote authenticated attacker could exploit this vulnerability to execute arbitrary commands.

References

ibm.com/support/pages/node/7237146 · Vendor Advisory

More vulnerabilities in webmethods integration

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

webmethods integration

ibm

= 10.11= 10.15= 10.5= 10.7

No fix yet

More vulnerabilities in webmethods integration

See all →