high8.8
CVE-2025-36049
IBM webMethods Integration Server 10.5, 10.7, 10.11, and 10.15 is vulnerable to an XML external entity injection (XXE) attack when processing XML data.
Impact
IBM webMethods Integration Server 10.5, 10.7, 10.11, and 10.15 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote authenticated attacker could exploit this vulnerability to execute arbitrary commands.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Webmethods Integration | Versions 10.5, 10.7, 10.11, 10.15 |