IBM webMethods Integration (on prem) -Integration Server 10.15 through IS_10.15_Core_Fix2611.1 to IS_11.1_Core_Fix10 IBM webMethods Integration is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
References
| Link | Resource |
|---|---|
| https://www.ibm.com/support/pages/node/7273550 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
01 Jun 2026, 17:33
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Ibm webmethods Integration Server
Ibm |
|
| CPE | cpe:2.3:a:ibm:webmethods_integration_server:10.15.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:webmethods_integration_server:11.1.0:*:*:*:*:*:*:* |
|
| References | () https://www.ibm.com/support/pages/node/7273550 - Vendor Advisory |
26 May 2026, 17:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-05-26 17:16
Updated : 2026-06-01 17:33
NVD link : CVE-2025-14290
Mitre link : CVE-2025-14290
CVE.ORG link : CVE-2025-14290
JSON object : View
Products Affected
ibm
- webmethods_integration_server
CWE
CWE-918
Server-Side Request Forgery (SSRF)