| CVE-2026-13759 |
IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 ships three ObjectInputStream subclasses (WsObjectInputStream,…
|
7.5
High
|
Jun 30, 2026 |
| CVE-2026-13772 |
IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 's Object Query Language engine resolves attacker-supplied class…
|
7.5
High
|
Jun 30, 2026 |
| CVE-2026-13773 |
IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 Approximately 50 generated CORBA stub classes in WebSphere eXtreme…
|
6.0
Medium
|
Jun 30, 2026 |
| CVE-2026-9002 |
IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 could allow an adjacent attacker to cause a denial of service due to…
|
6.5
Medium
|
Jun 30, 2026 |
| CVE-2020-4336 |
IBM WebSphere eXtreme Scale 8.6.1 stores sensitive information in URL parameters
|
3.7
Low
|
Jan 6, 2021 |
| CVE-2019-4115 |
IBM WebSphere eXtreme Scale 8.6 Admin API is vulnerable to cross-site scripting
|
5.4
Medium
|
Sep 30, 2019 |
| CVE-2019-4112 |
IBM WebSphere eXtreme Scale 8.6 Admin Console allows web pages to be stored locally which can be read by another user on…
|
4.0
Medium
|
Sep 30, 2019 |
| CVE-2019-4109 |
IBM WebSphere eXtreme Scale 8.6 Admin Console could allow a remote attacker to hijack the clicking action of the victim
|
6.1
Medium
|
Sep 30, 2019 |
| CVE-2019-4106 |
IBM WebSphere eXtreme Scale 8.6 Admin Console is vulnerable to cross-site scripting
|
4.8
Medium
|
Sep 30, 2019 |