Sensitive Information Disclosure in IBM webMethods Integration Server
CVE-2025-14150

6.5MEDIUM

Key Information:

Vendor

IBM
Status
Webmethods Integration (on Prem) - Integration Server
Vendor
CVE Published:
5 February 2026

What is CVE-2025-14150?

IBM webMethods Integration Server versions 10.15 to IS_11.1_Core_Fix8 are susceptible to a vulnerability that may allow sensitive user information to be disclosed through server responses. This issue can expose critical data, posing serious security risks for users relying on the platform for integration services. Organizations should ensure that they apply the necessary patches from IBM as detailed in their advisory to mitigate any potential exposure.

Affected Version(s)

webMethods Integration (on prem) - Integration Server 10.15

References

https://www.ibm.com/support/pages/node/7259518
vendor-advisorypatch

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.