Unrated severityNVD Advisory· Published Jun 18, 2025· Updated Aug 24, 2025
IBM webMethods Integration Sever XML external entity injection
CVE-2025-36049
Description
IBM webMethods Integration Server 10.5, 10.7, 10.11, and 10.15
is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote authenticated attacker could exploit this vulnerability to execute arbitrary commands.
Affected products
2- IBM/webMethods Integration Serverv5cpe:2.3:a:softwareag:webmethods:10.5:*:*:*:*:*:*:*Range: 10.5
- Range: 10.5, 10.7, 10.11, 10.15
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- www.ibm.com/support/pages/node/7237146mitrevendor-advisorypatch
News mentions
0No linked articles in our index yet.