What’s Vulnerable › Vulnerabilities
CVE-2025-14289: IBM webMethods Integration Server is vulnerable to HTML injection
- Severity: medium (CVSS 5.4 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-02-17 · updated 2026-06-17
- Weakness: CWE-80
Description
IBM webMethods Integration Server 12.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.
Affected products
References
Get alerted when CVE-2025-14289 or the next vulnerability affects your stack