CVEs (503)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Ibm 2Tivoli System Automation Application Manager Websphere Application ServerOct 23, 2026 Jul 30, 2026 N/A· v4 9.3 CRITICAL· v3 N/A· v2 IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by a cross-site scripting vulnerability in the administrative console login page. |
1Ibm 2Tivoli System Automation Application Manager Websphere Application ServerOct 23, 2026 Jul 30, 2026 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by cross-site scripting in the Administrative Console. |
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that th...Show more |
1Ibm 1Websphere Application Server Aug 4, 2026 Jul 29, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 traditional is vulnerable to server-side request forgery (SSRF) when the SIP container feature (sipSe...Show more |
IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty is vulnerable to HTTP request smuggling. |
IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty is vulnerable to HTTP request smuggling due to improper handling of TRACE requests. |
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 ND Collective Controller is affected by a path-segment injection vulnerability in the collective routing mechanism. |
IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty is vulnerable to HTTP Response Smuggling due to improper handling of non-standard HTTP version tokens. |
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to a denial of service due to uncontrolled heap allocation. |
IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty are affected by a denial of service vulnerability in the HTTP channel due to unbounded allocation of resources without limits. |
1Ibm 1Websphere Application Server Oct 23, 2026 Jul 28, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by remote code execution with the collectiveController-1.0 feature enabled. |
1Ibm 1Websphere Application Server Oct 23, 2026 Jul 28, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 IBM WebSphere Application Server 8.5, and 9.0 traditional could allow a remote attacker to execute arbitrary code caused by unsafe deserialization of untrusted data. |
IBM WebSphere Application Server 9.0, and 8.5 traditional could allow a remote attacker to obtain sensitive information. |
IBM WebSphere Application Server 8.5, and 9.0 traditional could allow a remote attacker to conduct a cross-site scripting attack. |
1Ibm 1Websphere Application Server Oct 23, 2026 Jul 28, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 IBM WebSphere Application Server 9.0, and 8.5 traditional is vulnerable to pre-authentication unsafe deserialization which could allow a remote attacker to bypass authentication or execute arbitrary code. |
1Ibm 1Websphere Application Server Oct 23, 2026 Jul 28, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to broken access control/privilege escalation in the administrative console. |
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of service vulnerability when the restConnector-2.0 feature is enabled. |
1Ibm 1Websphere Application Server Oct 23, 2026 Jul 28, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to bypass authentication by sending a crafted unauthenticated request. |
1Ibm 1Websphere Application Server Jul 29, 2026 Jun 30, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 IBM CICS Transaction Gateway for Multiplatforms 9.1, 9.2, 9.3, and 10.1 IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are affected by an HTTP reque...Show more |
IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the administrative console. |