EUVD-2026-40411

🗓️ 30 Jun 2026 20:50:34Reported by EUVDType

XSS in IBM WebSphere Application Server admin console affects versions 9.0 and 8.5.

Reporter	Title	Published	Views	Family All 17
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Buinses Automation Workflow (CVE-2026-11594, CVE-2026-11707, CVE-2026-11383, CVE-2026-11541, CVE-2026-11536)	29 Jun 202613:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server shipped with Jazz for Service Management (JazzSM) is affected by multiple cross-site scripting vulnerabilities	8 Jul 202613:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server, which is bundled with IBM WebSphere Hybrid Edition, is affected by multiple cross-site scripting vulnerabilities (CVE-2026-11594, CVE-2026-11707, CVE-2026-11383)	6 Jul 202621:34	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM WebSphere Application Server, which impacts IBM Tivoli Netcool Configuration Manager	16 Jul 202606:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Tivoli Composite Application Manager for Application Diagnostics installed IBM WebSphere Application Server is affected by multiple cross-site scripting vulnerabilities	7 Jul 202608:07	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM WebSphere Remote Server	29 Jun 202615:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server, which is bundled with IBM Cloud Pak for Applications, is affected by multiple cross-site scripting vulnerabilities (CVE-2026-11594, CVE-2026-11707, CVE-2026-11383)	6 Jul 202621:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server, which is bundled with IBM Enterprise Application Runtimes, is affected by multiple cross-site scripting vulnerabilities (CVE-2026-11594, CVE-2026-11707, CVE-2026-11383)	6 Jul 202621:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server is affected by multiple cross-site scripting vulnerabilities (CVE-2026-11594, CVE-2026-11707, CVE-2026-11383)	23 Jun 202614:45	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities have been identified in WebSphere Application Server shipped with WebSphere Service Registry and Repository (CVE-2026-11541, CVE-2026-11536, CVE-2026-11594, CVE-2026-11707 and CVE-2026-11383)	26 Jun 202610:22	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "438ad2d8-2b58-39b3-9a0a-6d40f34ed175",
        "vendor": {
          "name": "IBM"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "65a1e6c0-7aab-37e3-b0d3-537b087c4eac",
        "product": {
          "name": "WebSphere Application Server",
          "vendor": {
            "name": "IBM"
          }
        },
        "product_version": "8.5"
      },
      {
        "id": "6c074323-7f92-3767-83a9-9ed11a24324e",
        "product": {
          "name": "WebSphere Application Server",
          "vendor": {
            "name": "IBM"
          }
        },
        "product_version": "9.0"
      }
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/pages/node/7277546

30 Jun 2026 20:50Current

5.6Medium risk

Vulners AI Score5.6

CVSS 3.18.5

EPSS0.00337