7.5
CVE-2026-10842
- EPSS 0.31%
- Veröffentlicht 30.07.2026 16:16:53
- Zuletzt bearbeitet 05.08.2026 14:15:05
- CVE-Watchlists
- Unerledigt
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a security bypass vulnerability
IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 Traditional and Liberty could allow a remote attacker to bypass security constraints.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Websphere Application Server Version >= 8.5.0.0 < 8.5.5.31
Ibm ≫ Websphere Application Server Version >= 9.0.0.0 < 9.0.5.29
Ibm ≫ Websphere Application Server SwEditionliberty Version >= 17.0.0.3 < 26.0.0.8
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.31% | 0.234 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| IBM | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
CWE-289 Authentication Bypass by Alternate Name
The product performs authentication based on the name of a resource being accessed, or the name of the actor performing the access, but it does not properly check all possible names for that resource or actor.
https://www.ibm.com/support/pages/node/7280131