CVE-2025-36072

HIGH 8.8CVE-2025-36072 · Published 20/11/2025 · updated 18/10/2026

In short

CVE-2025-36072 is a HIGH (CVSS 8.8) vulnerability affecting webmethods integration (ibm).
Chance of exploitation in the next 30 days (EPSS): 0.50%, higher than 43.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
webmethods integration ibm	`= 10.11= 10.15= 11.1`	No fix yet

Description

IBM webMethods Integration 10.11 through 10.11_Core_Fix22, 10.15 through 10.15_Core_Fix22, and 11.1 through 11.1_Core_Fix6 IBM webMethods Integration allow an authenticated user to execute arbitrary code on the system, caused by the deserialization of untrusted object graphs data.

References

ibm.com/support/pages/node/7252090 · Vendor Advisory

More vulnerabilities in webmethods integration

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

webmethods integration

ibm

= 10.11= 10.15= 11.1

No fix yet

More vulnerabilities in webmethods integration

See all →