Medium · 5.4 CVE-2025-14290 EUVD-2025-209934GHSA-7v43-w3v8-wwv7

IBM webMethods Integration Sever is vulnerable to server-side request forgery

Published May 26, 2026 · Updated May 26, 2026 · Assigned by ibm

Vendor: IBM Product: webMethods Integration (on prem) - Integration Server

Description

IBM webMethods Integration (on prem) -Integration Server 10.15 through IS_10.15_Core_Fix2611.1 to IS_11.1_Core_Fix10 IBM webMethods Integration is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.

Affected products

Vendor	Product	Affected	Fixed
IBM	webMethods Integration (on prem) -Integration Server	10.15 – ≤ IS_10.15_Core_Fix2611.1 to IS_11.1_Core_Fix10	—

References

https://www.ibm.com/support/pages/node/7273550 vendor-advisory patch