Ibm

Websphere

12 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2026-11594

  • EPSS 0.28%
  • Veröffentlicht 30.06.2026 20:50:34
  • Zuletzt bearbeitet 02.07.2026 17:57:37

IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the administrative console.

9.3

CVE-2026-11708

  • EPSS 0.22%
  • Veröffentlicht 30.06.2026 20:17:27
  • Zuletzt bearbeitet 02.07.2026 18:07:30

IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the administrative console's integrated help system.

8.8

CVE-2026-8858

  • EPSS 0.25%
  • Veröffentlicht 22.06.2026 14:16:39
  • Zuletzt bearbeitet 09.07.2026 21:16:56

IBM WebSphere Application Server and IBM WebSphere Application Server Liberty are vulnerable to remote code execution and denial of service in the WebSphere Web Server Plug-in component. This vulnerability can be exploited when an attacker impersonat...

7.5

CVE-2025-33142

  • EPSS 0.25%
  • Veröffentlicht 14.08.2025 15:41:59
  • Zuletzt bearbeitet 18.08.2025 18:05:01

IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security for TLS connections.

5.4

CVE-2024-28775

  • EPSS 0.36%
  • Veröffentlicht 01.05.2024 13:15:51
  • Zuletzt bearbeitet 11.04.2025 14:09:38

IBM WebSphere Automation 1.7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a tru...

6.1

CVE-2018-1848

  • EPSS 1.33%
  • Veröffentlicht 14.12.2018 16:29:00
  • Zuletzt bearbeitet 21.11.2024 04:00:29

IBM Business Automation Workflow 18.0.0.0 and 18.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials...

3.3

CVE-2017-1756

  • EPSS 0.39%
  • Veröffentlicht 30.03.2018 16:29:00
  • Zuletzt bearbeitet 21.11.2024 03:22:19

IBM Business Process Manager 8.6 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 135856.

6.8

CVE-2016-9693

  • EPSS 0.53%
  • Veröffentlicht 07.03.2017 17:59:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

IBM Business Process Manager 7.5, 8.0, and 8.5 has a file download capability that is vulnerable to a set of attacks. Ultimately, an attacker can cause an unauthenticated victim to download a malicious payload. An existing file type restriction can b...

4

CVE-2015-1884

  • EPSS 2.92%
  • Veröffentlicht 28.06.2015 14:59:01
  • Zuletzt bearbeitet 06.05.2026 22:30:45

Directory traversal vulnerability in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 through 8.5.5.0 and WebSphere Lombardi Edition (WLE) 7.2 through 7.2.0.5 allows remote authenticate...

3.5

CVE-2015-0193

  • EPSS 0.93%
  • Veröffentlicht 30.05.2015 19:59:01
  • Zuletzt bearbeitet 06.05.2026 22:30:45

Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, and 8.5.x through 8.5.5.0 and WebSphere Lombardi Edition (WLE) 7.2.x through 7.2.0.5 allows remote authenticated users to inj...