CVE-2026-9667

EPSS 0.31%
Veröffentlicht 10.09.2026 20:57:22
Zuletzt bearbeitet 15.09.2026 17:05:49
Erkennungen
Login

IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to server-side request forgery (SSRF) that could allow a remote, unauthenticated attacker to cause the server to send outbound requests to arbitrary endpoints.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 2 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Websphere Application Server SwEdition traditional Version >= 8.5.0.0 < 8.5.5.31

Ibm ≫ Websphere Application Server SwEdition traditional Version >= 9.0.0.0 < 9.0.5.29

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.31%	0.237

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
IBM	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-918 Server-Side Request Forgery (SSRF)

The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

https://www.ibm.com/support/pages/node/7286610

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2026-9667

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-9667

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-9667

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-9667