CVE-2025-14289
HTML Injection in IBM webMethods Integration Server 12.0 Enables Remote Code Execution
Publication date: 2026-02-17
Last updated on: 2026-02-20
Assigner: IBM Corporation
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| ibm | webmethods_integration_server | 12.0.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-80 | The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special characters such as "<", ">", and "&" that could be interpreted as web-scripting elements when they are sent to a downstream component that processes web pages. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
The IBM webMethods Integration Server version 12.0 is vulnerable to an HTML injection vulnerability identified as CVE-2025-14289.
This vulnerability occurs in the Security > Claims UI component, allowing a remote attacker to inject malicious HTML code.
When a victim views this injected content, the code executes within the security context of the hosting site, potentially leading to cross-site scripting (XSS) attacks.
It is classified under CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS).
How can this vulnerability impact me? :
[{'type': 'paragraph', 'content': "This vulnerability allows a remote attacker to inject malicious HTML code that executes in the victim's web browser within the security context of the hosting site."}, {'type': 'paragraph', 'content': 'Such execution can lead to cross-site scripting (XSS) attacks, which may result in unauthorized actions performed on behalf of the user, theft of sensitive information, or session hijacking.'}, {'type': 'paragraph', 'content': 'The CVSS score indicates a low impact on confidentiality and integrity, no impact on availability, but the scope of the attack is changed, meaning it can affect resources beyond the vulnerable component.'}] [1]
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
I don't know
How can this vulnerability be detected on my network or system? Can you suggest some commands?
There are no specific detection methods or commands provided to identify this vulnerability on your network or system.
What immediate steps should I take to mitigate this vulnerability?
IBM recommends upgrading to webMethods Integration Server version 12.1 to remediate this vulnerability.
No workarounds or mitigations are provided other than the upgrade.