PT-2026-6557 · Ibm · Webmethods Integration Server

Published 2026-02-05 · Updated 2026-02-05 · CVE-2025-14150

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM webMethods Integration Server versions 10.15 through IS 10.15 Core Fix2411.1 to IS 11.1 Core Fix8

Description IBM webMethods Integration Server may reveal sensitive user information within its server responses.

Recommendations Update to a version after IS 11.1 Core Fix8.

Fix

Weakness Enumeration

CWE-497

Related Identifiers

CVE-2025-14150

Affected Products

Webmethods Integration Server

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-14150 · Security Note
• https://twitter.com/CVEnew/status/2019421056990089388 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2019426392035746253 · Twitter Post
• https://t.me/cveNotify/150984 · Telegram Post
• https://ibm.com/support/pages/node/7259518 · Patch, Vendor Advisory