CVE-2026-10845

Published: Jun 22, 2026Modified: Jun 23, 2026

7.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Exploitability: 3.9 / Impact: 3.4

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to bypass authentication and gain unauthorized access to JAX-WS applications.

Affected (2)

Products: Ibm: Websphere Application Server

Ibm

1 product

Websphere Application Server

Configuration A

2 vulnerable · 5 platform

Vulnerable Software	Affected Versions
Ibm Websphere Application Server	From 8.5.0.0 to 8.5.5.30
Ibm Websphere Application Server	From 9.0.0.0 to 9.0.5.29

Running on/with	Platform Versions
Ibm Aix	All versions
Ibm I	All versions
Ibm Z/os	All versions
Linux Linux Kernel	All versions
Microsoft Windows	All versions

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (1)

https://www.ibm.com/support/pages/node/7276597

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.