| CVE-2026-101294 |
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and…
|
8.7
High
|
Oct 13, 2026 |
| CVE-2026-105442 |
IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty 17.0.0.3 through…
|
7.5
High
|
Oct 13, 2026 |
| CVE-2026-93907 |
IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass authentication by exploiting a…
|
8.1
High
|
Oct 13, 2026 |
| CVE-2026-95680 |
IBM WebSphere Application Server 8.5, and 9.0 could allow an authenticated attacker to bypass authorization leading to…
|
8.0
High
|
Oct 13, 2026 |
| CVE-2026-103499 |
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and…
|
7.5
High
|
Oct 13, 2026 |
| CVE-2026-11722 |
IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8…
|
4.8
Medium
|
Sep 18, 2026 |
| CVE-2026-11711 |
IBM WebSphere Application Server 9.0 and 8.5 is affected by a deserialization vulnerability in the Name Service…
|
6.5
Medium
|
Sep 18, 2026 |
| CVE-2026-11710 |
IBM WebSphere Application Server 8.5 is affected by an HTTP request smuggling vulnerability due to improper handling…
|
6.5
Medium
|
Sep 18, 2026 |
| CVE-2026-11549 |
IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through…
|
6.5
Medium
|
Sep 18, 2026 |
| CVE-2026-11548 |
IBM WebSphere Application Server 8.5 and 9.0, and and IBM WebSphere Application Server - Liberty 17.0.0.3 through…
|
4.8
Medium
|
Sep 18, 2026 |
| CVE-2026-11545 |
IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to obtain sensitive information from the…
|
3.7
Low
|
Sep 18, 2026 |
| CVE-2026-11540 |
IBM WebSphere Application Server 9.0 and 8.5 could allow a remote attacker to obtain sensitive information about the…
|
5.3
Medium
|
Sep 18, 2026 |
| CVE-2026-11539 |
IBM WebSphere Application Server 9.0 and 8.5 is affected by an authentication bypass vulnerability in the SOAP/JMX…
|
5.3
Medium
|
Sep 18, 2026 |
| CVE-2026-11538 |
IBM WebSphere Application Server 9.0 and 8.5 is affected by a log injection vulnerability through crafted LTPA token…
|
3.7
Low
|
Sep 18, 2026 |
| CVE-2026-11537 |
IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to obtain sensitive information about the…
|
4.3
Medium
|
Sep 18, 2026 |
| CVE-2026-10841 |
IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through…
|
4.8
Medium
|
Sep 18, 2026 |
| CVE-2026-15396 |
IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through…
|
6.5
Medium
|
Sep 14, 2026 |
| CVE-2026-15412 |
IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through…
|
6.5
Medium
|
Sep 14, 2026 |
| CVE-2026-15634 |
IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through…
|
6.5
Medium
|
Sep 14, 2026 |
| CVE-2026-15887 |
IBM WebSphere Application Server 9.0, and 8.5 is affected by blind server-side request forgery when processing SOAP…
|
5.4
Medium
|
Sep 14, 2026 |
| CVE-2026-16186 |
IBM WebSphere Application Server 9.0, and 8.5 is affected by a reflected cross-site scripting vulnerability
|
5.4
Medium
|
Sep 14, 2026 |
| CVE-2026-16185 |
IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to bypass authentication on an admin console…
|
6.4
Medium
|
Sep 14, 2026 |
| CVE-2026-16187 |
IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to bypass authentication and obtain…
|
6.5
Medium
|
Sep 14, 2026 |
| CVE-2026-16188 |
IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to inject forged log entries into the…
|
5.3
Medium
|
Sep 14, 2026 |
| CVE-2026-16190 |
IBM WebSphere Application Server 9.0, and 8.5 is affected by an authorization bypass vulnerability
|
3.1
Low
|
Sep 14, 2026 |