Skip to content

Known vulnerabilities in IBM WebSphere Application Server

Is your version affected?

CVE Summary Score Published
CVE-2026-14529 IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8… 9.4 Critical Jul 29, 2026
CVE-2026-14446 IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to broken access control/privilege escalation in the… 9.8 Critical Jul 28, 2026
CVE-2026-14512 IBM WebSphere Application Server 9.0, and 8.5 traditional is vulnerable to pre-authentication unsafe deserialization… 9.8 Critical Jul 28, 2026
CVE-2026-11708 IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the… 9.3 Critical Jun 30, 2026
CVE-2026-11712 IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the… 9.3 Critical Jun 30, 2026
CVE-2026-9319 IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to potential remote code execution due to deserialization of… 9.0 Critical Jun 1, 2026
CVE-2026-9311 IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to remote code execution caused by the bypass of security… 9.0 Critical Jun 1, 2026
CVE-2026-8644 IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to identity spoofing 9.1 Critical Jun 1, 2026
CVE-2025-36038 IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to execute arbitrary code on the system… 9.0 Critical Jun 25, 2025
CVE-2020-4450 IBM WebSphere Application Server 8.5 and 9.0 traditional could allow a remote attacker to execute arbitrary code on… 9.8 Critical Jun 5, 2020
CVE-2020-4448 IBM WebSphere Application Server Network Deployment 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to execute… 9.8 Critical Jun 5, 2020
CVE-2019-4279 IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to execute arbitrary code on the system… 9.0 Critical May 17, 2019
CVE-2018-1567 IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow remote attackers to execute arbitrary Java code… 9.8 Critical Sep 7, 2018

Other IBM products