CVE-2025-36049

8.8 highEPSS 0.6%

High (8.8) in ibm webmethods integration. EPSS 0.6% chance of exploitation in the next 30 days.

IBM webMethods Integration Server 10.5, 10.7, 10.11, and 10.15 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote authenticated attacker could exploit this vulnerability to execute arbitrary commands.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 51% of CVEs (scores of 2026-10-31)
CWE: CWE-611
Published: 2025-06-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:webmethods_integration

References

https://www.ibm.com/support/pages/node/7237146

Check your stack JSON