Security Bulletin: IBM WebSphere Application Server is affected by an Allocation of Resources Without Limits or Throttling vulnerability due to Apache CXF ( CVE-2026-107937)

Summary There is a vulnerability in the Apache CXF library that affects IBM WebSphere Application Server. Vulnerability Details CVEID:CVE-2026-107937 DESCRIPTION: In Apache CXF, the parser for multipart/MTOM attachment part headers did not fully enforce the configured attachment-max-header-size...

Security Bulletin: IBM WebSphere Application Server Liberty is affected by an improper access control (CVE-2026-105443)

Summary IBM WebSphere Application Server Liberty is affected by an improper access control vulnerability with the restConnector-1.0 or restConnector-2.0 enabled. Vulnerability Details CVEID:CVE-2026-105443 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 has...

Security Bulletin: IBM WebSphere Application Server is affected by a Deserialization of Untrusted Data vulnerability due to Google Guava (CVE-2026-102554)

Summary There is a vulnerability in the Google Guava library that affects IBM WebSphere Application Server. Vulnerability Details CVEID:CVE-2026-102554 DESCRIPTION: Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4.0 through...

Security Bulletin: IBM Maximo Application Suite - Predict Component uses multiple dependencies which are vulnerable to multiple CVEs.

Summary IBM Maximo Application Suite - Predict Component uses IBM WebSphere Application Server Liberty , gnupg2 2.2.20-3.el86, platform-python 3.9.20-1.module+el8.10.0+22342+478c159e, platform-python 50.3.2-6.module+el8.10.0+22183+c898c0c1 , libarchive 3.5.3-9.el97 , platform-python...

Security Bulletin: IBM Maximo Application Suite - Predict Component uses multiple dependencies which are vulnerable to multiple CVEs.

Summary IBM Maximo Application Suite - Predict Component uses WebSphere Application Server Liberty is affected by a server-side request forgery, expat 2.2.5-15.el810, glib2 2.56.4-162.el8, gnutls 3.6.16-8.el810.4, krb5-devel 1.18.2-29.el810, python 3.10.6 , libxml2 2.9.7-18.el810.1, which are...

Security Bulletin: Multiple Vulnerabilities have been identified in IBM DB2 shipped with IBM WebSphere Remote Server

Summary IBM DB2 is shipped with IBM WebSphere Remote Server. Information about security vulnerabilities affecting IBM DB2 has been published in a security bulletin CVE-2026-18166, CVE-2026-49844, CVE-2026-105466, CVE-2026-105465, CVE-2026-32597, CVE-2026-30922, CVE-2026-78404, CVE-2026-105464,...

Security Bulletin: Multiple security vulnerabilities may affect IBM WebSphere Liberty that is shipped with IBM CICS TX Advanced.

Summary Multiple security vulnerabilities may affect IBM WebSphere Liberty that is shipped with IBM CICS TX Advanced. IBM WebSphere Liberty has been updated within IBM CICS TX Advanced to address these vulnerabilities. Vulnerability Details CVEID:CVE-2026-14532 DESCRIPTION: IBM WebSphere...

Security Bulletin: There are multiple vulnerabilities in websphere and Db2 used by IBM Maximo Manage application in IBM Maximo Application Suite

Summary There are multiple vulnerabilities in websphere and Db2 used by IBM Maximo Manage application in IBM Maximo Application Suite. This bulletin contains information regarding these vulnerabilities and their fixtures. Vulnerability Details CVEID:CVE-2026-15064 DESCRIPTION: IBM WebSphere...

Security Bulletin: There are multiple vulnerabilities in websphere and Db2 used by IBM Maximo Manage application in IBM Maximo Application Suite

Summary There are multiple vulnerabilities in websphere and Db2 used by IBM Maximo Manage application in IBM Maximo Application Suite. This bulletin contains information regarding these vulnerabilities and their fixtures. Vulnerability Details CVEID:CVE-2026-15064 DESCRIPTION: IBM WebSphere...

Security Bulletin: Multiple security vulnerabilities may affect IBM WebSphere Liberty that is shipped with TXSeries for Multiplatforms.

Summary Multiple security vulnerabilities may affect IBM WebSphere Liberty that is shipped with TXSeries for Multiplatforms. IBM WebSphere Liberty has been updated within TXSeries for Multiplatforms to address these vulnerabilities. Vulnerability Details CVEID:CVE-2026-93895 DESCRIPTION: IBM...

JavaUnserializeExploits

JavaUnserializeExploits Python scripts and HTTP request referenced in the blog post What Do WebLogic, WebSphere, JBoss, Jenkins, OpenNMS, and Your Application Have in Common? This Vulnerability at http://foxglovesecurity.com...

CVE-2016-5983

CVE-2016-5983 IBM WebSphere deserialization of untrusted data - IBM WebSphere 7,8,8.5,9 Link to Original Writeup Source: https://techblog.mediaservice.net/2016/10/cve-2016-5983-ibm-websphere-deserialization-of-untrusted-data/ Title: IBM WebSphere deserialization of untrusted data Application: IBM...

serialator

serialator Python script to exploit CVE-2015-4852. Description During a recent engagement, I found that Nessus was now actively exploiting vulnerabilities for confirmation. When I checked the associated nasl script I found that the payload was generic enough to be used on a standalone script...

WebSphere-WSIF-gadget

WSIF Gadget for WebSphere CVE-2020-4464 / CVE-2020-4450 This is based on the excellent blog posts of ZDI original report by @tint0: https://www.thezdi.com/blog/2020/7/20/abusing-java-remote-protocols-in-ibm-websphere...

Security Bulletin: Multiple vulnerabilities in IBM WebSphere Application Server, which impacts IBM Tivoli Netcool Configuration Manager(ITNCM).

Summary IBM WebSphere Application Server is a required product for IBM Tivoli Netcool Configuration ManagerITNCM version 6.4.2. Multiple vulnerabilities were addressed in IBM WebSphere Application Server. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes sectio...

Security Bulletin: Multiple vulnerabilities have been identified in IBM WebSphere Application Server used by IBM Rational ClearQuest

Summary IBM WebSphere Application Server is used by the IBM Rational ClearQuest server. Information about security vulnerabilities affecting IBM WebSphere Application Server have been published in multiple security bulletins. Vulnerability Details Refer to the security bulletins listed in the...

Security Bulletin: IBM Controller Disclosure Management has addressed vulnerabilities

Summary There are vulnerabilities in IBM Controller Disclosure Management. IBM Controller Disclosure Management 1.0.1.0 has addressed the applicable CVEs. Please refer to the table in the Related Information section for vulnerability impact. Vulnerability Details CVEID:CVE-2026-15057 DESCRIPTION:...

Security Bulletin: IBM MQ Console is affected by multiple vulnerabilities in IBM WebSphere Application Server Liberty

Summary IBM MQ Console has addressed multiple vulnerabilities in IBM WebSphere Application Server Liberty Vulnerability Details CVEID:CVE-2026-14981 DESCRIPTION: IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty are affected by a denial of service vulnerability in th...

Security Bulletin: IBM MQ console is affected by a remote code execution and path-segment injection vulnerability (CVE-2026-14976, CVE-2026-15280)

Summary IBM MQ Console has addressed a remote code execution and path-segment injection vulnerability in WebSphere Application Server Liberty Vulnerability Details CVEID:CVE-2026-14976 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by remote code...

Security Bulletin: IBM MQ Console is affected by a denial of service vulnerability (CVE-2026-16192)

Summary IBM MQ Console has addressed a denial of service vulnerability in IBM WebSphere Application Server Liberty Vulnerability Details CVEID:CVE-2026-16192 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of service vulnerability when the...