| CVE-2026-11708 |
IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the…
|
9.3
Critical
|
Jun 30, 2026 |
| CVE-2026-11712 |
IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the…
|
9.3
Critical
|
Jun 30, 2026 |
| CVE-2026-10852 |
IBM WebSphere Application Server and IBM WebSphere Application Server Liberty are vulnerable to denial of service in the…
|
5.9
Medium
|
Jun 22, 2026 |
| CVE-2026-9320 |
IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6…
|
5.9
Medium
|
Jun 22, 2026 |
| CVE-2026-9071 |
IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6…
|
7.5
High
|
Jun 22, 2026 |
| CVE-2026-9006 |
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to server-side request forgery (SSRF) with the Ajax Proxy…
|
7.4
High
|
Jun 22, 2026 |
| CVE-2026-8646 |
IBM WebSphere Application Server 9.0 and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6…
|
7.4
High
|
Jun 22, 2026 |
| CVE-2026-10845 |
IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to bypass authentication and gain…
|
7.3
High
|
Jun 22, 2026 |
| CVE-2026-9072 |
IBM WebSphere Application Server and IBM WebSphere Application Server Liberty - when using Intelligent Management with…
|
8.1
High
|
Jun 22, 2026 |
| CVE-2026-8858 |
IBM WebSphere Application Server and IBM WebSphere Application Server Liberty are vulnerable to remote code execution…
|
7.5
High
|
Jun 22, 2026 |
| CVE-2026-9330 |
IBM WebSphere Application Server 9.0, and 8.5 is affected by an improper validation of user-supplied data during…
|
8.5
High
|
Jun 1, 2026 |
| CVE-2026-9319 |
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to potential remote code execution due to deserialization of…
|
9.0
Critical
|
Jun 1, 2026 |
| CVE-2026-9311 |
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to remote code execution caused by the bypass of security…
|
9.0
Critical
|
Jun 1, 2026 |
| CVE-2026-8644 |
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to identity spoofing
|
9.1
Critical
|
Jun 1, 2026 |
| CVE-2026-4410 |
IBM WebSphere Application Server - Liberty 19.0.0.7 through 26.0.0.5 and IBM WebSphere Application Server 9.0, and 8.5…
|
4.8
Medium
|
May 27, 2026 |
| CVE-2025-13333 |
IBM WebSphere Application Server 9.0, and 8.5 could provide weaker than expected security during system administration…
|
4.4
Medium
|
Feb 17, 2026 |
| CVE-2025-12635 |
IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.12 are…
|
5.4
Medium
|
Dec 8, 2025 |
| CVE-2025-36099 |
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to a denial of service, caused by sending a specially-crafted…
|
4.9
Medium
|
Sep 29, 2025 |
| CVE-2025-33142 |
IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security for TLS connections
|
5.3
Medium
|
Aug 14, 2025 |
| CVE-2024-56339 |
IBM WebSphere Application Server 9.0 and WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.7 could allow a…
|
3.7
Low
|
Aug 7, 2025 |
| CVE-2025-36097 |
IBM WebSphere Application Server 9.0 and WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.7 are vulnerable…
|
7.5
High
|
Jul 16, 2025 |
| CVE-2025-36038 |
IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to execute arbitrary code on the system…
|
9.0
Critical
|
Jun 25, 2025 |
| CVE-2025-33104 |
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting
|
4.4
Medium
|
May 14, 2025 |
| CVE-2025-27907 |
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to server-side request forgery (SSRF)
|
4.1
Medium
|
Apr 22, 2025 |
| CVE-2024-45087 |
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting
|
4.8
Medium
|
Nov 11, 2024 |