IBM WebSphere eXtreme Scale 8.6.1.0 < 8.6.2.2 XSS (7293764)

The version of IBM WebSphere eXtreme Scale installed on the remote host is prior to 8.6.2.2 IBM. It is, therefore, affected by multiple vulnerabilities as referenced in the 7293764 advisory. - In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing elements fro...

IBM WebSphere eXtreme Scale 8.6.1.0 <= 8.6.2.2 Multiple Vulnerabilities (7293764)

The version of IBM WebSphere eXtreme Scale installed on the remote host is 8.6.1.0 through 8.6.2.2. Its Liberty deployment is, therefore, affected by multiple vulnerabilities as referenced in the 7293764 advisory. - IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.2.2 could allow a remote attacker...

CVE-2026-101117

IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.2.2 could allow a remote attacker to bypass security restrictions due to improper Content Security Policy configuration...

CVE-2026-101117 IBM WebSphere eXtremes Scale Liberty deployment is affected by Cross Site Scripting(XSS) attacks.

IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.2.2 could allow a remote attacker to bypass security restrictions due to improper Content Security Policy configuration...

EUVD-2026-119618

IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.2.2 could allow a remote attacker to bypass security restrictions due to improper Content Security Policy configuration...

CVE-2026-101117

IBM WebSphere eXtreme Scale (versions 8.6.1.0 through 8.6.2.2) is vulnerable to a security bypass because of an improper Content Security Policy configuration (CWE-16 ). A remote attacker can exploit this flaw to bypass security restrictions, resulting in high impact on confidentiality and integr...

PT-2026-140025

Name of the Vulnerable Software and Affected Versions IBM WebSphere Extreme Scale versions 8.6.1.0 through 8.6.2.2 Description IBM WebSphere Extreme Scale Liberty deployment is susceptible to Cross-Site Scripting XSS, a flaw where malicious scripts are injected into trusted websites. This issue...

CVE-2026-101117: IBM WebSphere Extreme Scale: IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.2.2 could allow a remote attacker to bypass security restrictions due…

IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.2.2 could allow a remote attacker to bypass security restrictions due to improper Content Security Policy configuration...

Security Bulletin: Multiple Vulnerabilities in IBM® Runtime Environment Java™ Technology Edition affects WebSphere eXtreme Scale

Summary There are multiple vulnerabilities in IBM Runtime Environment Java Version 8 used by WebSphere eXtreme Scale. Vulnerability Details CVEID:CVE-2026-41254 DESCRIPTION: Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after...

IBM WebSphere eXtreme Scale 8.6.2.0 < 8.6.2.2 (7282872)

The version of IBM WebSphere eXtreme Scale installed on the remote host is prior to 8.6.2.2 IBM. It is, therefore, affected by multiple vulnerabilities as referenced in the 7282872 advisory. - Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function...

Security Bulletin: IBM WebSphere eXtreme Scale is affected by multiple CVEs

Summary Multiple vulnerabilities were addressed in IBM WebSphere eXtreme Scale ifix PH72363 Vulnerability Details CVEID:CVE-2026-2950 DESCRIPTION: Impact: Lodash versions 4.17.23 and earlier are vulnerable to prototype pollution in the .unset and .omit functions. The fix for CVE-2025-13465:...

IBM WebSphere eXtreme Scale server request forgeing vulnerability

IBM WebSphere eXtreme Scale is an elastic data caching and object grid platform developed by American company IBM. IBM WebSphere eXtreme Scale has a server-side request forgeing vulnerability. This vulnerability arises from the Java deserialization of approximately 50 CORBA stub classes in the...

IBM WebSphere eXtreme Scale deserialization injection vulnerability

IBM WebSphere eXtreme Scale is an elastic data caching and object grid platform developed by American company IBM. IBM WebSphere eXtreme Scale has a deserialization injection vulnerability, allowing attackers to execute arbitrary code on the grid replication layer...

IBM WebSphere eXtreme Scale resource management error vulnerabilities

IBM WebSphere eXtreme Scale is an elastic data caching and object grid platform developed by American company IBM. There is a resource management vulnerability in IBM WebSphere eXtreme Scale, which stems from improper validation by the XDF decoder. Attackers can exploit this vulnerability to...

IBM WebSphere eXtreme Scale 8.6.1.0 < 8.6.1.6 (7278745)

The version of IBM WebSphere eXtreme Scale installed on the remote host is prior to 8.6.1.6 IBM. It is, therefore, affected by multiple vulnerabilities as referenced in the 7278745 advisory. - jQuery UI is a curated set of user interface interactions, effects, widgets, and themes built on top of...

CVE-2026-13772

IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 's Object Query Language engine resolves attacker-supplied class names via Class.forName and invokes their constructors with no allow-list at three distinct sinks SELECT NEW, enum literals, and reflection-based comparators; an authenticated remo...

CVE-2026-13773

IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 Approximately 50 generated CORBA stub classes in WebSphere eXtreme Scale's ogclient.jar call ORB.stringtoobject on an attacker-controlled IOR string during Java deserialization, turning any unfiltered ObjectInputStream sink in WAS into outbound...

CVE-2026-13759

IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 ships three ObjectInputStream subclasses WsObjectInputStream, ObjectStreamPool$ReusableInputStream, ObjectInputStreamResolver that install no JEP-290 class filter; when Coherence is on the classpath, multiple RCE gadget chains including...

EUVD-2026-40388

IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 ships three ObjectInputStream subclasses WsObjectInputStream, ObjectStreamPool$ReusableInputStream, ObjectInputStreamResolver that install no JEP-290 class filter; when Coherence is on the classpath, multiple RCE gadget chains including...

CVE-2026-13759 IBM WebSphere eXtreme Scale is affected by Insecure Deserilization

IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 ships three ObjectInputStream subclasses WsObjectInputStream, ObjectStreamPool$ReusableInputStream, ObjectInputStreamResolver that install no JEP-290 class filter; when Coherence is on the classpath, multiple RCE gadget chains including...