High severity7.2NVD Advisory· Published Jun 18, 2025· Updated Jun 17, 2026
CVE-2025-36048
CVE-2025-36048
Description
IBM webMethods Integration Server 10.5, 10.7, 10.11, and 10.15 could allow a privileged user to escalate their privileges when handling external entities due to execution with unnecessary privileges.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6(expand)+ 1 more
- (no CPE)
- cpe:2.3:a:softwareag:webmethods:10.5:*:*:*:*:*:*:*range: 10.5
cpe:2.3:a:ibm:webmethods_integration:10.5:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:ibm:webmethods_integration:10.5:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:webmethods_integration:10.7:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:webmethods_integration:10.11:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:webmethods_integration:10.15:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- www.ibm.com/support/pages/node/7237144nvdVendor Advisory
News mentions
0No linked articles in our index yet.