11813 matches found
CVE-2026-10841
IBM WebSphere Application Server versions 8.5 (through 8.5.5.30), 9.0 (through 9.0.5.28), and Liberty (17.0.0.3 through 26.0.0.8) are vulnerable to HTTP request smuggling (CWE-444: Inconsistent Interpretation of HTTP Requests). The vulnerability allows an authenticated attacker with low privilege...
EUVD-2026-83030
IBM WebSphere Application Server 8.5, 9.0, and Liberty are vulnerable to HTTP request smuggling...
Security Bulletin: IBM WebSphere Application Server shipped with Jazz for Service Management (JazzSM) is affected by a privilege escalation
Summary IBM WebSphere Application Server shipped with Jazz for Service Management JazzSM is affected by a privilege escalation CVE-2026-11545 Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions...
Security Bulletin: IBM WebSphere Application Server shipped with Jazz for Service Management (JazzSM) are affected by multiple vulnerabilities
Summary IBM WebSphere Application Server shipped with Jazz for Service Management JazzSM are affected by multiple vulnerabilities CVE-2026-16190, CVE-2026-15887, CVE-2026-15412, CVE-2026-16435, CVE-2026-15396, CVE-2026-15634, CVE-2026-16185, CVE-2026-10841, CVE-2026-11548, CVE-2026-11549,...
PT-2026-95610
IBM WebSphere Application Server 9.0 and 8.5 is affected by a deserialization vulnerability in the Name Service component...
CVE-2026-11722: Inconsistent Interpretation of HTTP Requests
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by an HTTP request smuggling vulnerability...
CVE-2026-11710: Inconsistent Interpretation of HTTP Requests
IBM WebSphere Application Server 8.5 is affected by an HTTP request smuggling vulnerability due to improper handling of Content-Length headers...
CVE-2026-11549: Improper Access Control
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a virtual host bypass vulnerability...
CVE-2026-11548: Inconsistent Interpretation of HTTP Requests
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by an HTTP request smuggling vulnerability...
CVE-2026-11545: Missing Authorization
IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to obtain sensitive information from the administrative console due to missing authorization checks...
CVE-2026-11539: Missing Authentication for Critical Function
IBM WebSphere Application Server 9.0 and 8.5 is affected by an authentication bypass vulnerability in the SOAP/JMX connector...
CVE-2026-10841: Inconsistent Interpretation of HTTP Requests
IBM WebSphere Application Server 8.5, 9.0, and Liberty are vulnerable to HTTP request smuggling...
PT-2026-95600
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server 9.0 IBM WebSphere Application Server 8.5 Description Log injection is possible through the use of crafted LTPA Lightweight Third-Party Authentication token cookies. This allows an attacker to insert malicious...
PT-2026-95604
IBM WebSphere Application Server 9.0 and 8.5 is affected by an authentication bypass vulnerability in the SOAP/JMX connector...
PT-2026-95472
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions prior to 9.0.5.29 IBM WebSphere Application Server versions prior to 8.5.5.31 Description A remote attacker can obtain sensitive information regarding the file system by exploiting the 'FileTransfer'...
PT-2026-95605
IBM WebSphere Application Server 9.0 and 8.5 could allow a remote attacker to obtain sensitive information about the file system through the FileTransfer servlet...
CVE-2026-11540: Incorrect Authorization
IBM WebSphere Application Server 9.0 and 8.5 could allow a remote attacker to obtain sensitive information about the file system through the FileTransfer servlet...
CVE-2026-11537: Trusting HTTP Permission Methods on the Server Side
IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to obtain sensitive information about the file system through the FileTransfer servlet...
CVE-2026-11538: Improper Output Neutralization for Logs
IBM WebSphere Application Server 9.0 and 8.5 is affected by a log injection vulnerability through crafted LTPA token cookies...