« Volver al listado

CVE-2025-14150

Estado: AplazadaMedia (6.5)—

IBM webMethods Integration (on prem) - Integration Server 10.15 through IS_10.15_Core_Fix2411.1 to IS_11.1_Core_Fix8 IBM webMethods Integration could disclose sensitive user information in server responses.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

IBM — Integration ServerAIIBM — Webmethods IntegrationAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-14150",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-14150",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-02-05T14:42:49.108381Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "psirt@us.ibm.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.5,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:ibm:webmethods_integration_on_prem___integration_server:10.15:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:webmethods_integration_on_prem___integration_server:10.15.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:webmethods_integration_on_prem___integration_server:is_10.15_core_fix2411.1:*:*:*:*:*:*:*"
          ],
          "vendor": "IBM",
          "product": "webMethods Integration (on prem) - Integration Server",
          "versions": [
            {
              "status": "affected",
              "version": "10.15",
              "versionType": "semver",
              "lessThanOrEqual": "IS_10.15_Core_Fix2411.1 to IS_11.1_Core_Fix8"
            }
          ]
        }
      ]
    }
  ],
  "published": "2026-02-05T14:16:04.090",
  "references": [
    {
      "url": "https://www.ibm.com/support/pages/node/7259518",
      "source": "psirt@us.ibm.com"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@us.ibm.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-497"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "IBM webMethods Integration (on prem) - Integration Server 10.15 through IS_10.15_Core_Fix2411.1 to IS_11.1_Core_Fix8 IBM webMethods Integration could disclose sensitive user information in server responses."
    },
    {
      "lang": "es",
      "value": "IBM webMethods Integration (en las instalaciones) - Servidor de Integración 10.15 desde IS_10.15_Core_Fix2411.1 hasta IS_11.1_Core_Fix8 IBM webMethods Integration podría divulgar información sensible del usuario en las respuestas del servidor."
    }
  ],
  "lastModified": "2026-06-17T08:35:25.077",
  "sourceIdentifier": "psirt@us.ibm.com"
}