CVE-2025-36202CWE-134

IBM webMethods Integration code execution

High · published September 22, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
27.0
In the wild
Unconfirmed
What it is

IBM webMethods Integration 10.15 and 11.1 could allow an authenticated user with required execute Services to execute commands on the system due to the improper validation of format string strings passed as an argument from an external source.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00347 · 27.0th percentile
Weakness
CWE-134 · Use of Externally-Controlled Format String
Published
2025-09-22T15:14Z
EPSS history
Timeline
  • 22 SEP 15:14Z
    IBM webMethods Integration code execution
    cvelistv5