Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-10842 1Ibm 1Websphere Application Server Aug 5, 2026 Jul 30, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 Traditional and Liberty could allow a remote attacker to bypass security constraints.
CVE-2026-15435 1Ibm 1App Connect Enterprise Aug 5, 2026 Jul 30, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing...Show more IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to write arbitrary files on the system.Show less
CVE-2026-14980 1Ibm 1Websphere Application Server Aug 4, 2026 Jul 30, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to cross-site request forgery which could allow an attacker to perform SSRF attacks with elevated privileges when the collectiveControlle...Show more IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to cross-site request forgery which could allow an attacker to perform SSRF attacks with elevated privileges when the collectiveController-1.0 feature is enabled.Show less
CVE-2026-14522 1Ibm 1App Connect Enterprise Aug 5, 2026 Jul 30, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to execute arbitrary commands due to improper neutralization of CRLF characters.
CVE-2026-14519 1Ibm 1App Connect Enterprise Aug 5, 2026 Jul 30, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to read arbitrary files due to a path traversal vulnerability.
CVE-2026-12947 1Ibm 1App Connect Enterprise Aug 5, 2026 Jul 30, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 stores potentially sensitive information in log files that could be read by a local user.
CVE-2026-11980 1Ibm 2Aspera Aspera Desktop App Aug 13, 2026 Jul 30, 2026 N/A· v4 7.3 HIGH· v3 N/A· v2 IBM Aspera Desktop App 1.0.5 through 1.0.19 can allow arbitrary code execution by loading DLL files at start-up.
CVE-2026-11897 1Ibm 1Websphere Application Server Aug 4, 2026 Jul 30, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the se...Show more IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources.Show less
CVE-2026-11707 1Ibm 2Tivoli System Automation Application Manager Websphere Application Server Aug 18, 2026 Jul 30, 2026 N/A· v4 9.3 CRITICAL· v3 N/A· v2 IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by a cross-site scripting vulnerability in the administrative console login page.
CVE-2026-11383 1Ibm 2Tivoli System Automation Application Manager Websphere Application Server Aug 18, 2026 Jul 30, 2026 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by cross-site scripting in the Administrative Console.
CVE-2025-36431 1Ibm 2Sterling B2b Integrator Sterling File Gateway Aug 17, 2026 Jul 30, 2026 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM Sterling B2B Integrator 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.2.0 through 6.2.2.0_1 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary Java...Show more IBM Sterling B2B Integrator 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.2.0 through 6.2.2.0_1 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.Show less
CVE-2025-36298 1Ibm 2Sterling B2b Integrator Sterling File Gateway Aug 17, 2026 Jul 30, 2026 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM Sterling B2B Integrator 6.1.2.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.1.2.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_...Show more IBM Sterling B2B Integrator 6.1.2.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.1.2.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 Ebics server component is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.Show less
CVE-2026-2482 1Ibm 1Websphere Application Server Aug 4, 2026 Jul 29, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that th...Show more IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.Show less
CVE-2026-14529 1Ibm 1Websphere Application Server Aug 4, 2026 Jul 29, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 traditional is vulnerable to server-side request forgery (SSRF) when the SIP container feature (sipSe...Show more IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 traditional is vulnerable to server-side request forgery (SSRF) when the SIP container feature (sipServlet-1.1) is enabled.Show less
CVE-2026-15328 1Ibm 1Websphere Application Server Aug 5, 2026 Jul 28, 2026 N/A· v4 8.1 HIGH· v3 N/A· v2 IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to HTTP request smuggling.
CVE-2026-15325 1Ibm 1Websphere Application Server Aug 6, 2026 Jul 28, 2026 N/A· v4 8.7 HIGH· v3 N/A· v2 IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty is vulnerable to HTTP request smuggling due to improper handling of TRACE requests.
CVE-2026-15280 1Ibm 1Websphere Application Server Aug 5, 2026 Jul 28, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 ND Collective Controller is affected by a path-segment injection vulnerability in the collective routing mechanism.
CVE-2026-15064 1Ibm 1Websphere Application Server Aug 5, 2026 Jul 28, 2026 N/A· v4 8.7 HIGH· v3 N/A· v2 IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to HTTP Response Smuggling due to improper handling of non-standard HTTP version tokens...Show more IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to HTTP Response Smuggling due to improper handling of non-standard HTTP version tokens.Show less
CVE-2026-15057 1Ibm 1Websphere Application Server Aug 5, 2026 Jul 28, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to a denial of service due to uncontrolled heap allocation.
CVE-2026-14996 1Ibm 1Aspera Faspex Aug 5, 2026 Jul 28, 2026 N/A· v4 8.2 HIGH· v3 N/A· v2 IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 has addressed a vulnerability related to session management.

Previous 1...202122...436 Next