EUVD-2025-18661Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
3DescriptionCVE.org
IBM webMethods Integration Server 10.5, 10.7, 10.11, and 10.15
is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote authenticated attacker could exploit this vulnerability to execute arbitrary commands.
AnalysisAI
CVE-2025-36049 is a security vulnerability (CVSS 8.8). High severity vulnerability requiring prompt remediation.
Technical ContextAI
CWE-611 (XML External Entity). CVSS 8.8 indicates high severity.
RemediationAI
Monitor vendor channels for patch availability.
More in Webmethods Integration
View allIBM webMethods Integration 10.15 could allow an authenticated user to upload and execute arbitrary files which could be
IBM webMethods Integration 10.15 could allow an authenticated user to create scheduler tasks that would allow them to es
Privilege escalation vulnerability in IBM webMethods Integration Server affecting versions 10.5, 10.7, 10.11, and 10.15,
IBM webMethods Integration 10.15 could allow an authenticated user to traverse directories on the system. Rated medium s
IBM webMethods Integration 10.11 through 10.11_Core_Fix22, 10.15 through 10.15_Core_Fix22, and 11.1 through 11.1_Core_Fi
IBM webMethods Integration 10.15 and 11.1 could allow an authenticated user with required execute Services to execute co
IBM webMethods Integration 10.15 and 11.1 is vulnerable to server-side request forgery (SSRF). Rated medium severity (CV
Share
External POC / Exploit Code
Leaving vuln.today