8.3
Élevée
CVE-2026-14980 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to cross-site request forgery which…
Description
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to cross-site request forgery which could allow an attacker to perform SSRF attacks with elevated privileges when the collectiveController-1.0 feature is enabled.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WebSphere Application Server - Liberty 17.0 | 17.0.0.3 → 26.0.0.8 | Pas de correctif indiqué |
Autres CVE de WebSphere Application Server - Liberty
Les 52 CVE de WebSphere Application Server - Liberty →
CVE-2026-93905
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 could allow an unauthenticated remote attacker…
8.2
Élevée
CVE-2026-93909
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 is vulnerable by an authentication bypass…
9.1
Critique
CVE-2026-93895
IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to…
9.1
Critique
CVE-2026-95695
IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to bypass…
7.4
Élevée