CVE-2026-16187

IBM WebSphere Application Server versions 9.0 (prior to 9.0.5.29) and 8.5 (prior to 8.5.5.31) are vulnerable to an authentication bypass that allows a remote attacker to send a crafted unauthenticated request and obtain sensitive information . The CVSS 3.1 score is 6.5 (MEDIUM) with an Adjacent N...

EUVD-2026-77803

IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to inject forged log entries into the server's administrative log...

CVE-2026-16188

IBM WebSphere Application Server 9.0 and 8.5 are vulnerable to a log injection flaw that allows a remote, unauthenticated attacker to forge entries in the server's administrative log . The CVELIST record specifies that versions prior to 9.0.5.29 and prior to 8.5.5.31 are affected, implying those ...

CVE-2026-16188 IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to inject forged log entries into the server's administrative log...

EUVD-2026-77801

IBM WebSphere Application Server 9.0, and 8.5 is affected by an authorization bypass vulnerability...

CVE-2026-16190 IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

IBM WebSphere Application Server 9.0, and 8.5 is affected by an authorization bypass vulnerability...

CVE-2026-16190 IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

IBM WebSphere Application Server 9.0, and 8.5 is affected by an authorization bypass vulnerability...

CVE-2026-16190

IBM WebSphere Application Server versions 9.0 and 8.5 are affected by an authorization bypass vulnerability classified as CWE-862 (Missing Authorization) . The CVSS 3.1 score is 3.1 (LOW) with vector AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N, indicating exploitation requires an adjacent network positio...

EUVD-2026-77800

IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to inject forged log entries into the server's administrative log...

CVE-2026-16189 IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to inject forged log entries into the server's administrative log...

CVE-2026-16189

IBM WebSphere Application Server 9.0 and 8.5 (prior to versions 9.0.5.29 and 8.5.5.31 respectively) allow a remote attacker to inject forged log entries into the server's administrative log. The vulnerability requires no prior authentication but has a high attack complexity, resulting in a CVSS 3...

CVE-2026-16189 IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to inject forged log entries into the server's administrative log...

CVE-2026-16435 IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

IBM WebSphere Application Server 9.0, and 8.5 is affected by an authentication bypass vulnerability when using XD or Intelligent-Management features...

EUVD-2026-77796

IBM WebSphere Application Server 9.0, and 8.5 is affected by an authentication bypass vulnerability when using XD or Intelligent-Management features...

CVE-2026-16435

IBM WebSphere Application Server versions 9.0 and 8.5 are affected by an authentication bypass vulnerability that occurs when the XD or Intelligent-Management features are in use. The root cause is classified as CWE-650 (Trusting HTTP Permission Methods on the Server Side) , meaning the server in...

CVE-2026-16435 IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

IBM WebSphere Application Server 9.0, and 8.5 is affected by an authentication bypass vulnerability when using XD or Intelligent-Management features...

Security Bulletin: Multiple security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Buinsess Automation Workflow (including Java)

Summary WebSphere Application Server is shipped as a component of IBM Business Automation Workflow. Information about security vulnerabilities affecting IBM WebSphere Application Server Traditional have been published in a security bulletin. Vulnerability Details Refer to the security bulletins...

Security Bulletin: Multiple vulnerabilities have been identified in WebSphere Application Server shipped with WebSphere Service Registry and Repository (CVE-2026-11710 etc.)

Summary WebSphere Application Server is shipped as a component of WebSphere Service Registry and Repository. Information about multiple vulnerabilities affecting WebSphere Application Server have been published in security bulletins. Vulnerability Details Refer to the security bulletins listed in...

PT-2026-91450

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server 9.0 IBM WebSphere Application Server 8.5 IBM WebSphere Application Server - Liberty affected versions not specified Description Improper parsing of the HTTP transfer-encoding request header allows for HTTP...

PT-2026-91448

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty are vulnerable to HTTP request smuggling, caused by improper parsing of the HTTP transfer-encoding request header. By sending a specially crafted HTTP transfer-encoding request header, an attacker could...