Ibm

Websphere Application Server

519 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.3

CVE-2026-11708

Medienbericht
  • EPSS 0.36%
  • Veröffentlicht 30.06.2026 20:17:27
  • Zuletzt bearbeitet 02.07.2026 18:07:30

IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the administrative console's integrated help system.

9.3

CVE-2026-11712

Medienbericht
  • EPSS 0.34%
  • Veröffentlicht 30.06.2026 20:17:27
  • Zuletzt bearbeitet 02.07.2026 18:06:52

IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the administrative console help system.

7.5

CVE-2026-10852

  • EPSS 0.29%
  • Veröffentlicht 22.06.2026 19:32:28
  • Zuletzt bearbeitet 09.07.2026 21:16:54

IBM WebSphere Application Server and IBM WebSphere Application Server Liberty are vulnerable to denial of service in the WebSphere WebServer Plug-in component when an attacker can pass crafted requests to the web server.

7.5

CVE-2026-9320

  • EPSS 0.35%
  • Veröffentlicht 22.06.2026 14:53:36
  • Zuletzt bearbeitet 23.06.2026 20:46:51

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerab...

7.5

CVE-2026-9071

  • EPSS 0.55%
  • Veröffentlicht 22.06.2026 14:47:39
  • Zuletzt bearbeitet 23.06.2026 20:46:35

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerab...

9.1

CVE-2026-9006

  • EPSS 0.24%
  • Veröffentlicht 22.06.2026 14:46:47
  • Zuletzt bearbeitet 24.06.2026 05:17:30

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to server-side request forgery (SSRF) with the Ajax Proxy configured. This may allow an attacker to send unauthorized requests from the system, resulting in a security bypass or information ...

9.1

CVE-2026-8646

  • EPSS 0.37%
  • Veröffentlicht 22.06.2026 14:44:42
  • Zuletzt bearbeitet 24.06.2026 05:17:30

IBM WebSphere Application Server 9.0 and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are vulnerable to HTTP request smuggling. A remote attacker could smuggle a specially crafted request to the application server ther...

7.3

CVE-2026-10845

  • EPSS 0.47%
  • Veröffentlicht 22.06.2026 14:43:16
  • Zuletzt bearbeitet 23.06.2026 20:36:49

IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to bypass authentication and gain unauthorized access to JAX-WS applications.

9.8

CVE-2026-9072

  • EPSS 0.38%
  • Veröffentlicht 22.06.2026 14:21:35
  • Zuletzt bearbeitet 09.07.2026 21:16:56

IBM WebSphere Application Server and IBM WebSphere Application Server Liberty - when using Intelligent Management with the WebSphere WebServer Plug-in component - are vulnerable to remote code execution and denial of service. This vulnerability can b...

8.5

CVE-2026-9330

Medienbericht
  • EPSS 0.52%
  • Veröffentlicht 01.06.2026 18:01:06
  • Zuletzt bearbeitet 22.07.2026 08:10:00

IBM WebSphere Application Server 9.0, and 8.5 is affected by an improper validation of user-supplied data during deserialization using the SAML Web Single Sign-On component. This could result in remote code execution via a crafted HTTP request when c...