CVE-2025-14290CWE-918

IBM webMethods Integration Sever is vulnerable to server-side request forgery

Medium · published May 26, 2026

CVSS v3.1
5.4
EPSS
0%
Percentile
7.4
In the wild
Unconfirmed
What it is

IBM webMethods Integration (on prem) -Integration Server 10.15 through IS_10.15_Core_Fix2611.1 to IS_11.1_Core_Fix10 IBM webMethods Integration is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00182 · 7.4th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2026-05-26T15:49Z
EPSS history
Timeline
  • 26 MAY 15:49Z
    IBM webMethods Integration Sever is vulnerable to server-side request forgery
    cvelistv5