← CVE Intelligence

CVE-2025-36049

IBM webMethods Integration Sever XML external entity injection PUBLISHED

Description (CNA)

IBM webMethods Integration Server 10.5, 10.7, 10.11, and 10.15 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote authenticated attacker could exploit this vulnerability to execute arbitrary commands.

Affected (CNA)

Vendor / productVersions
IBM / webMethods Integration Serveraffected 10.5; affected 10.7; affected 10.11; affected 10.15

CWE

CWE-611

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.