Skip to content
OpenAdvisories
High · 7.5 CVE-2026-123628 EUVD-2026-125812GHSA-2ch9-693p-5rhw

IBM webMethods Integration Server is vulnerable to sensitive information disclousure via admin/server/env API request.

Published Nov 13, 2026 · Assigned by ibm

Vendor: IBM Product: webMethods Integration Server

Description

IBM webMethods Integration Server 10.15 and 11.1 could allow a remote attacker to obtain sensitive information due to an exposure of sensitive server-side environment variables and Java runtime details.

Affected products

VendorProductAffectedFixed
IBM webMethods Integration Server 10.15 – ≤ 10.15_Core_Fix2, 11.1 – ≤ 11.1_Core_Fix11 —

References