374970 matches found
CVE-2026-11713
IBM WebSphere Application Server Liberty versions 17.0.0.3 through 26.0.0.9 are affected by a privilege escalation vulnerability (CVE-2026-11713 ) when the restConnector-2.0 feature is enabled. The root cause is identified as Incorrect Authorization (CWE-863 ), which could allow an attacker to ga...
CVE-2026-11713 IBM WebSphere Application Server Liberty Incorrect Authorization
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by a privilege escalation vulnerability with the restConnector-2.0 feature enabled...
CVE-2026-14532
IBM WebSphere Application Server - Liberty versions 17.0.0.3 through 26.0.0.9 are vulnerable to an Integer Overflow (CWE-190) that allows an attacker with Reader-role privileges to obtain version information, which can trigger an uncaught exception . This issue also affects IBM Tivoli Application...
CVE-2026-14532 IBM WebSphere Application Server Liberty Integer Overflow
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a Reader-role attacker to obtain version information that causes an uncaught exception...
CVE-2026-14909
IBM WebSphere Application Server Liberty (versions 17.0.0.3 through 26.0.0.9) is vulnerable to an information disclosure vulnerability (CWE-209). When the restConnector-2.0 feature is enabled, an authenticated attacker can obtain sensitive information through the generation of error messages cont...
CVE-2026-14909 IBM WebSphere Application Server Liberty Information Disclosure
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by an information disclosure vulnerability that allows an authenticated attacker to obtain sensitive information when restConnector-2.0 is enbabled...
CVE-2026-77816
The IBM WebSphere Application Server - Liberty administrative client (versions 17.0.0.3 through 26.0.0.9 ) is vulnerable to a man-in-the-middle attack due to Improper Certificate Validation (CWE-295). An attacker could exploit this flaw to obtain sensitive information. This vulnerability also aff...
CVE-2026-77816 IBM WebSphere Application Server Liberty Improper Certificate Validation
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 administrative client could allow man-in-the-middle attacks. An attacker could exploit this vulnerability to obtain sensitive information...
CVE-2026-79715
IBM WebSphere Application Server - Liberty versions 17.0.0.3 through 26.0.0.9 are vulnerable to a path traversal vulnerability (CWE-22 ). A local attacker can use a specially crafted application archive to traverse directories and write files outside the intended directory. This issue also affect...
CVE-2026-79715 IBM WebSphere Application Server Liberty Path Traversal
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a local attacker to traverse directories on the system. An attacker could use a specially crafted application archive to write files outside the intended directory...
CVE-2026-97844
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-97839
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-97840
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-97842
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-97843
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-97841
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-97833
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
CVE-2026-97834
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...