Ibm Webmethods Integration Server vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Ibm Webmethods Integration Server: 2 record(s), with affected versions and fixes.cpe:2.3:a:ibm:webmethods_integration_server
CVE-2025-14290
Medium · 5.4
CWE-918 May 26, 2026
IBM webMethods Integration Sever is vulnerable to server-side request forgery
IBM webMethods Integration (on prem) -Integration Server 10.15 through IS_10.15_Core_Fix2611.1 to IS_11.1_Core_Fix10 IBM webMethods Integration is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
CVE-2025-14289
Medium · 5.4
CWE-80 Feb 17, 2026
IBM webMethods Integration Server is vulnerable to HTML injection
IBM webMethods Integration Server 12.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.