CVEvulnerability

CVE-2025-36072

8.8 HIGH Published 2025-11-20 Modified 2026-10-18 Official page ↗
Status
Analyzed
Published
2025-11-20
Last modified
2026-10-18
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-502

Description

IBM webMethods Integration 10.11 through 10.11_Core_Fix22, 10.15 through 10.15_Core_Fix22, and 11.1 through 11.1_Core_Fix6 IBM webMethods Integration allow an authenticated user to execute arbitrary code on the system, caused by the deserialization of untrusted object graphs data.

Affected configurations

• ibm webmethods integration 10.11 • ibm webmethods integration 10.15 • ibm webmethods integration 11.1

Related

Weakness · CWE (1)

  • CWE-502 Deserialization of Untrusted Data weakness

References