Skip to content
OpenAdvisories

Product · IBM

webMethods Integration

6 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 5.4

    IBM webMethods Integration server-side request forgery

    IBM webMethods Integration 10.15 and 11.1 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.

  • Medium 6.5

    IBM webMethods Integration directory traversal

    IBM webMethods Integration 10.15 could allow an authenticated user to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.