PT-2025-38725 · Ibm · Webmethods Integration

Rob Maslen · Publicado 2025-09-22 · Atualizado 2025-09-22 · CVE-2025-36202

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM webMethods Integration versions 10.15 and 11.1

Description An authenticated user with execute Services permissions may be able to execute commands on the system. This is due to improper validation of format string strings received from an external source.

Recommendations Apply updates to address improper validation of format string strings for IBM webMethods Integration version 10.15. Apply updates to address improper validation of format string strings for IBM webMethods Integration version 11.1.

Correção

Use of Externally-Controlled Format String

Enumeração de Fraquezas

CWE-134

Identificadores relacionados

BDU:2025-11544

CVE-2025-36202

Produtos afetados

Webmethods Integration

Referências · 5

• https://twitter.com/CVEnew/status/1970153791799349617 · Publicação no Twitter
• https://ibm.com/support/pages/node/7245720 · Aviso do Fabricante, Correção
• https://bdu.fstec.ru/vul/2025-11544 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2025-36202 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-36202 · Nota de Segurança