CVE-2024-56339

🗓️ 07 Aug 2025 16:03:05Reported by ibmType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 35 Views

IBM WebSphere Application Server security flaw allows remote attackers to bypass restrictions.

Reporter	Title	Published	Views	Family All 64
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses WebSphere Application Server Liberty which could allow a remote attacker to bypass security restrictions and vulnerable to CVE-2024-56339.	29 Dec 202512:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Enterprise Application Runtimes, is affected by a security bypass vulnerability (CVE-2024-56339)	28 Jul 202521:25	–	ibm
IBM Security Bulletins	Security Bulletin:IBM WebSphere Application Server Liberty shipped with IBM OpenPages is vulnerable to multiple vulnerabilities	7 Oct 202519:58	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images	14 Nov 202514:06	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in IBM WebSphere Liberty that is shipped with IBM TXSeries for Multiplatforms (CVE-2025-36097 and CVE-2024-56339).	9 Sep 202517:08	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in IBM WebSphere Liberty that is shipped with IBM CICS TX Standard (CVE-2025-36097 and CVE-2024-56339)	9 Sep 202517:14	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in IBM WebSphere Liberty that is shipped with IBM CICS TX Advanced (CVE-2025-36097 and CVE-2024-56339).	9 Sep 202517:39	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for January 2026.	30 Jan 202617:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM WebSphere Hybrid Edition, is affected by a security bypass vulnerability (CVE-2024-56339)	28 Jul 202521:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty, which are bundled with WebSphere Remote Server, are affected by a security bypass vulnerability (CVE-2024-56339)	22 Jul 202520:21	–	ibm

NVD

Vulners

Node

ibm websphere_application_serverRange17.0.0.3–25.0.0.7liberty

ibm websphere_application_serverMatch9.0.0.0-

[
  {
    "cpes": [
      "cpe:2.3:a:ibm:websphere_application_server:9.0:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "product": "WebSphere Application Server",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "9.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "cpes": [
      "cpe:2.3:a:ibm:websphere_application_server:17.0.0.3:*:*:*:liberty:*:*:*",
      "cpe:2.3:a:ibm:websphere_application_server:25.0.0.7:*:*:*:liberty:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "product": "WebSphere Application Server Liberty",
    "vendor": "IBM",
    "versions": [
      {
        "lessThanOrEqual": "25.0.0.7",
        "status": "affected",
        "version": "17.0.0.3",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/pages/node/7239955

14 Aug 2025 20:02Current

7High risk

Vulners AI Score7

CVSS 3.13.7 - 7.5

EPSS0.00132

SSVC

CWE-650