Skip to content
OpenAdvisories
High · 7.8 CVE-2026-2310 EUVD-2026-75878GHSA-vxvc-4pm5-3rq9

IBM webMethods Integration Server is vulnerable to an XML external entity injection (XXE) attack when processing XML data

Published Sep 10, 2026 · Updated Sep 11, 2026 · Assigned by ibm

Vendor: IBM Product: webMethods Integration Server

Description

IBM webMethods Integration Server 11.1 IBM webMethods Integration is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.

Affected products

VendorProductAffectedFixed
IBM webMethods Integration Server 11.1 —

References