CVE-2026-11541
Published Jun 30, 2026IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are affected by an HTTP request smuggling vulnerability.
- evidence mentions
- 1
- Buzz score
- 11.9
Vendor/product archive
ibm / websphere_application_server CVEs
Beta · best-effort468 CVEs tagged to ibm / websphere_application_server — 50 Critical, 89 High, 288 Medium, 41 Low, 0 Unrated.
CVE-2026-11594
Published Jun 30, 2026IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the administrative console.
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2026-11806
Published Jun 30, 2026IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 is affected by an arbitrary file read vulnerability with the restConnector-2.0 feature enabled.
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2026-11714
Published Jun 30, 2026IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is affected by a server-side request forgery vulnerability with the apiDiscovery-1.0 feature enabled.
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2026-11712
Published Jun 30, 2026IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the administrative console help system.
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2026-11708
Published Jun 30, 2026IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the administrative console's integrated help system.
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2026-11595
Published Jun 30, 2026IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to obtain sensitive information from the administrative console's integrated help system.
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2026-11546
Published Jun 30, 2026IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is affected by a server-side request forgery vulnerability with the adminCenter-1.0 feature enabled.
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2026-9320
Published Jun 22, 2026IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are vulnerable to a denial of service, caused by sending a s…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2026-9071
Published Jun 22, 2026IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are vulnerable to a denial of service, caused by sending a s…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2026-9006
Published Jun 22, 2026IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to server-side request forgery (SSRF) with the Ajax Proxy configured. This may allow an attacker to send unauthorized r…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2026-8646
Published Jun 22, 2026IBM WebSphere Application Server 9.0 and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are vulnerable to HTTP request smuggling. A remote attacker c…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2026-10845
Published Jun 22, 2026IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to bypass authentication and gain unauthorized access to JAX-WS applications.
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2026-9330
Published Jun 1, 2026IBM WebSphere Application Server 9.0, and 8.5 is affected by an improper validation of user-supplied data during deserialization using the SAML Web Single Sign-On component. This…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2026-9319
Published Jun 1, 2026IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to potential remote code execution due to deserialization of untrusted data via JAX-WS endpoints with WS-Security.
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2026-9311
Published Jun 1, 2026IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to remote code execution caused by the bypass of security controls.
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2026-8644
Published Jun 1, 2026IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to identity spoofing.
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2026-5516
Published May 27, 2026IBM WebSphere Application Server - Liberty 22.0.0.11 through 26.0.0.5 IBM WebSphere Application Server Liberty could allow a remote attacker to bypass security under limited condi…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2026-4410
Published May 27, 2026IBM WebSphere Application Server - Liberty 19.0.0.7 through 26.0.0.5 and IBM WebSphere Application Server 9.0, and 8.5 and WebSphere Application Server Liberty are vulnerable to a…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2026-8633
Published May 26, 2026IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2026-8620
Published May 26, 2026IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2026-3621
Published Apr 23, 2026IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.4 IBM WebSphere Application Server Liberty is vulnerable to identity spoofing under limited conditions when an a…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2026-1561
Published Mar 25, 2026IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty is vulnerable to server-side request forgery (SSRF). This may allow r…
- evidence mentions
- 2
- Buzz score
- 21.0
CVE-2025-14917
Published Mar 25, 2026IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty could provide weaker than expected security when administering securi…
- evidence mentions
- 2
- Buzz score
- 21.0
CVE-2025-14915
Published Mar 25, 2026IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty is affected by privilege escalation. A privileged user could gain add…
- evidence mentions
- 2
- Buzz score
- 21.0
Showing 1-25 of 468 CVEsPage 1 of 19