EUVD-2026-50063

🗓️ 28 Jul 2026 20:50:33Reported by EUVDType

WebSphere Application Server eight point five and nine point zero traditional allow remote cross-site scripting.

Reporter	Title	Published	Views	Family All 23
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM WebSphere Remote Server (CVE-2026-14974, CVE-2026-14515)	18 Aug 202621:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server, which is bundled with IBM Enterprise Application Runtimes, is affected by cross-site scripting and deserialization vulnerabilities (CVE-2026-14974, CVE-2026-14515)	4 Aug 202616:44	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM WebSphere Application Server, which impacts IBM Tivoli Netcool Configuration Manager	24 Aug 202614:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server, which is bundled with IBM WebSphere Hybrid Edition, is affected by cross-site scripting and deserialization vulnerabilities (CVE-2026-14974, CVE-2026-14515)	31 Jul 202604:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Tivoli Composite Application Manager for Application Diagnostics installed IBM WebSphere Application Server and is affected by cross-site scripting and deserialization vulnerabilities (CVE-2026-14974, CVE-2026-14515)	17 Aug 202605:32	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been found in WebSphere Application Server shipped with IBM Guardium Key Lifecycle Manager (GKLM)	6 Aug 202609:41	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM DevOps Code ClearCase	27 Aug 202606:07	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities within WebSphere Application Server, affect IBM Tivoli Monitoring.	4 Sep 202623:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server, which is bundled with IBM Cloud Pak for Applications, is affected by cross-site scripting and deserialization vulnerabilities (CVE-2026-14974, CVE-2026-14515)	4 Aug 202616:44	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Buinsess Automation Workflow	5 Aug 202608:30	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "f7a519b4-a61a-3535-b6a0-7ad0694e2cd5",
        "vendor": {
          "name": "IBM"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "bbf01d66-5061-385e-91ad-2e889abe1de0",
        "product": {
          "name": "WebSphere Application Server",
          "vendor": {
            "name": "IBM"
          }
        },
        "product_version": "8.5"
      },
      {
        "id": "ffd56e06-c336-3550-b416-508eccd857a2",
        "product": {
          "name": "WebSphere Application Server",
          "vendor": {
            "name": "IBM"
          }
        },
        "product_version": "9.0"
      }
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/pages/node/7281641

28 Jul 2026 20:50Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.16.1

EPSS0.00178