7.5
Élevée
CVE-2026-8858 IBM WebSphere Application Server and IBM WebSphere Application Server Liberty are vulnerable to remote code execution…
Description
IBM WebSphere Application Server and IBM WebSphere Application Server Liberty are vulnerable to remote code execution and denial of service in the WebSphere Web Server Plug-in component. This vulnerability can be exploited when an attacker impersonates the application server and sends crafted responses to the plug-in.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| i 7.6 | 7.6.0 → 1.8.4 | Pas de correctif indiqué |
| i | 7.5.0 | Pas de correctif indiqué |
| i | 7.4.0 | Pas de correctif indiqué |
| i | 7.3.0 | Pas de correctif indiqué |
| WebSphere Application Server | 9.0 | Pas de correctif indiqué |
| WebSphere Application Server | 8.5 | Pas de correctif indiqué |
Autres CVE de i
Les 214 CVE de i →
CVE-2026-93744
IBM i 7.3, 7.4, 7.5, and 7.6 could allow an unathenticated remote attacker to bypass security restrictions due to…
6.5
Moyenne
CVE-2026-17068
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version restrictions due to improper enforcement…
5.4
Moyenne
CVE-2026-17073
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to obtain sensitive information due to missing subtree…
5.4
Moyenne
CVE-2026-17275
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform unauthorized manipulation of distributed…
3.7
Faible