What’s Vulnerable › Products

IBM webMethods Integration vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your IBM webMethods Integration version is affected

Latest IBM webMethods Integration vulnerabilities

• CVE-2026-2310 — IBM webMethods Integration Server is vulnerable to an XML external entity injection (XXE) attack when processing XML data (CVSS 7.8)
• CVE-2026-12118 — IBM webMethods Integration could allow an unauthenticated remote attacker to execute arbitrary code on the system due to the deserialization of untrusted data (CVSS 9.8)
• CVE-2025-36072 — IBM webMethods Integration Deserialization (CVSS 8.8)
• CVE-2025-36202 — IBM webMethods Integration code execution (CVSS 8.8)
• CVE-2025-36037 — IBM webMethods Integration server-side request forgery (CVSS 5.4)
• CVE-2025-36049 — IBM webMethods Integration Sever XML external entity injection (CVSS 8.8)
• CVE-2025-36048 — IBM webMethods Integration Sever code execution (CVSS 7.2)
• CVE-2024-45076 — IBM webMethods Integration code execution (CVSS 9.9)
• CVE-2024-45075 — IBM webMethods Integration privilege escalation (CVSS 8.8)
• CVE-2024-45074 — IBM webMethods Integration directory traversal (CVSS 6.5)