VULNERABILITY INTELLIGENCE

CVE-2025-36049

CVSS score8.8 HIGH

EPSS probability0.65%

CISA KEVNot currently listed

Published2025-06-18

Last modified2026-06-17

Description

IBM webMethods Integration Server 10.5, 10.7, 10.11, and 10.15 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote authenticated attacker could exploit this vulnerability to execute arbitrary commands.