| CVE-2026-16189 |
IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to inject forged log entries into the…
|
4.8
Medium
|
Sep 14, 2026 |
| CVE-2026-16435 |
IBM WebSphere Application Server 9.0, and 8.5 is affected by an authentication bypass vulnerability when using XD or…
|
5.9
Medium
|
Sep 14, 2026 |
| CVE-2026-9667 |
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to server-side request forgery (SSRF) that could allow a…
|
5.3
Medium
|
Sep 10, 2026 |
| CVE-2026-9176 |
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a security bypass due to improper authentication controls
|
6.7
Medium
|
Sep 10, 2026 |
| CVE-2026-9327 |
IBM WebSphere Application Server 9.0, and 8.5 could allow an authenticated user with a low-privilege administrative role…
|
6.3
Medium
|
Sep 10, 2026 |
| CVE-2026-9336 |
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a denial of service, caused by sending a…
|
6.5
Medium
|
Sep 10, 2026 |
| CVE-2026-9338 |
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a denial of service, caused by sending a…
|
5.3
Medium
|
Sep 10, 2026 |
| CVE-2026-8400 |
IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty Continuous delivery has a…
|
8.1
High
|
Aug 5, 2026 |
| CVE-2026-11536 |
IBM WebSphere Application Server 9.0, and 8.5 is affected by a remote code execution vulnerability in the SOAP/JMX…
|
8.5
High
|
Jul 30, 2026 |
| CVE-2026-9322 |
IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7…
|
7.5
High
|
Jul 30, 2026 |
| CVE-2026-10842 |
IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7…
|
7.5
High
|
Jul 30, 2026 |
| CVE-2026-14529 |
IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8…
|
9.4
Critical
|
Jul 29, 2026 |
| CVE-2026-14446 |
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to broken access control/privilege escalation in the…
|
9.8
Critical
|
Jul 28, 2026 |
| CVE-2026-14515 |
IBM WebSphere Application Server 8.5, and 9.0 traditional could allow a remote attacker to conduct a cross-site…
|
6.1
Medium
|
Jul 28, 2026 |
| CVE-2026-14512 |
IBM WebSphere Application Server 9.0, and 8.5 traditional is vulnerable to pre-authentication unsafe deserialization…
|
9.8
Critical
|
Jul 28, 2026 |
| CVE-2026-14528 |
IBM WebSphere Application Server 9.0, and 8.5 traditional could allow a remote attacker to obtain sensitive information
|
7.4
High
|
Jul 28, 2026 |
| CVE-2026-14974 |
IBM WebSphere Application Server 8.5, and 9.0 traditional could allow a remote attacker to execute arbitrary code caused…
|
8.1
High
|
Jul 28, 2026 |
| CVE-2026-14981 |
IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty are affected by a denial of service…
|
7.5
High
|
Jul 28, 2026 |
| CVE-2026-15064 |
IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty is vulnerable to HTTP Response Smuggling…
|
8.7
High
|
Jul 28, 2026 |
| CVE-2026-15325 |
IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty is vulnerable to HTTP request…
|
8.7
High
|
Jul 28, 2026 |
| CVE-2026-15328 |
IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty is vulnerable to HTTP request smuggling
|
7.4
High
|
Jul 28, 2026 |
| CVE-2026-16184 |
IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to bypass authentication by sending a…
|
7.0
High
|
Jul 28, 2026 |
| CVE-2026-11541 |
IBM CICS Transaction Gateway for Multiplatforms 9.1, 9.2, 9.3, and 10.1 IBM WebSphere Application Server 9.0, and 8.5…
|
7.4
High
|
Jun 30, 2026 |
| CVE-2026-11594 |
IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the…
|
8.5
High
|
Jun 30, 2026 |
| CVE-2026-11595 |
IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to obtain sensitive information from the…
|
4.3
Medium
|
Jun 30, 2026 |