PT-2026-43278 · Ibm · Webmethods Integration (On Prem) -Integration Server

Published 2026-05-26 · Updated 2026-05-26 · CVE-2025-14290

NVD

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

IBM webMethods Integration (on prem) -Integration Server 10.15 through IS 10.15 Core Fix2611.1 to IS 11.1 Core Fix10 IBM webMethods Integration is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2025-14290

Affected Products

Webmethods Integration (On Prem) -Integration Server

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2025-14290 · Security Note
• https://ibm.com/support/pages/node/7273550 · Patch, Vendor Advisory