PT-2026-43278 · Ibm · Webmethods Integration (On Prem) -Integration Server+1
CVE-2025-14290
·
Published
2026-05-26
·
Updated
2026-05-26
CVSS v3.1
5.4
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
IBM webMethods Integration versions 10.15 through 11.1
Description
IBM webMethods Integration is susceptible to server-side request forgery (SSRF), a flaw where the server can be coerced into making requests to an unintended location. This allows an authenticated attacker to send unauthorized requests from the system, which may lead to network enumeration or facilitate further attacks.
Recommendations
Update IBM webMethods Integration to a version later than IS 11.1 Core Fix10.
Fix
SSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Webmethods Integration (On Prem) -Integration Server
Webmethods Integration Server