Security Bulletin: Multiple Vulnerabilities have been identified in IBM DB2 shipped with IBM WebSphere Remote Server

Summary IBM DB2 is shipped with IBM WebSphere Remote Server. Information about security vulnerabilities affecting IBM DB2 has been published in a security bulletin CVE-2026-18166, CVE-2026-49844, CVE-2026-105466, CVE-2026-105465, CVE-2026-32597, CVE-2026-30922, CVE-2026-78404, CVE-2026-105464,...

Security Bulletin: Multiple security vulnerabilities may affect IBM WebSphere Liberty that is shipped with IBM CICS TX Advanced.

Summary Multiple security vulnerabilities may affect IBM WebSphere Liberty that is shipped with IBM CICS TX Advanced. IBM WebSphere Liberty has been updated within IBM CICS TX Advanced to address these vulnerabilities. Vulnerability Details CVEID:CVE-2026-14532 DESCRIPTION: IBM WebSphere...

Security Bulletin: There are multiple vulnerabilities in websphere and Db2 used by IBM Maximo Manage application in IBM Maximo Application Suite

Summary There are multiple vulnerabilities in websphere and Db2 used by IBM Maximo Manage application in IBM Maximo Application Suite. This bulletin contains information regarding these vulnerabilities and their fixtures. Vulnerability Details CVEID:CVE-2026-15064 DESCRIPTION: IBM WebSphere...

Security Bulletin: There are multiple vulnerabilities in websphere and Db2 used by IBM Maximo Manage application in IBM Maximo Application Suite

Summary There are multiple vulnerabilities in websphere and Db2 used by IBM Maximo Manage application in IBM Maximo Application Suite. This bulletin contains information regarding these vulnerabilities and their fixtures. Vulnerability Details CVEID:CVE-2026-15064 DESCRIPTION: IBM WebSphere...

Security Bulletin: Multiple security vulnerabilities may affect IBM WebSphere Liberty that is shipped with TXSeries for Multiplatforms.

Summary Multiple security vulnerabilities may affect IBM WebSphere Liberty that is shipped with TXSeries for Multiplatforms. IBM WebSphere Liberty has been updated within TXSeries for Multiplatforms to address these vulnerabilities. Vulnerability Details CVEID:CVE-2026-93895 DESCRIPTION: IBM...

JavaUnserializeExploits

JavaUnserializeExploits Python scripts and HTTP request referenced in the blog post What Do WebLogic, WebSphere, JBoss, Jenkins, OpenNMS, and Your Application Have in Common? This Vulnerability at http://foxglovesecurity.com...

CVE-2016-5983

CVE-2016-5983 IBM WebSphere deserialization of untrusted data - IBM WebSphere 7,8,8.5,9 Link to Original Writeup Source: https://techblog.mediaservice.net/2016/10/cve-2016-5983-ibm-websphere-deserialization-of-untrusted-data/ Title: IBM WebSphere deserialization of untrusted data Application: IBM...

serialator

serialator Python script to exploit CVE-2015-4852. Description During a recent engagement, I found that Nessus was now actively exploiting vulnerabilities for confirmation. When I checked the associated nasl script I found that the payload was generic enough to be used on a standalone script...

WebSphere-WSIF-gadget

WSIF Gadget for WebSphere CVE-2020-4464 / CVE-2020-4450 This is based on the excellent blog posts of ZDI original report by @tint0: https://www.thezdi.com/blog/2020/7/20/abusing-java-remote-protocols-in-ibm-websphere...

Security Bulletin: Multiple vulnerabilities in IBM WebSphere Application Server, which impacts IBM Tivoli Netcool Configuration Manager(ITNCM).

Summary IBM WebSphere Application Server is a required product for IBM Tivoli Netcool Configuration ManagerITNCM version 6.4.2. Multiple vulnerabilities were addressed in IBM WebSphere Application Server. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes sectio...

Security Bulletin: Multiple vulnerabilities have been identified in IBM WebSphere Application Server used by IBM Rational ClearQuest

Summary IBM WebSphere Application Server is used by the IBM Rational ClearQuest server. Information about security vulnerabilities affecting IBM WebSphere Application Server have been published in multiple security bulletins. Vulnerability Details Refer to the security bulletins listed in the...

Security Bulletin: IBM Controller Disclosure Management has addressed vulnerabilities

Summary There are vulnerabilities in IBM Controller Disclosure Management. IBM Controller Disclosure Management 1.0.1.0 has addressed the applicable CVEs. Please refer to the table in the Related Information section for vulnerability impact. Vulnerability Details CVEID:CVE-2026-15057 DESCRIPTION:...

Security Bulletin: IBM MQ Console is affected by multiple vulnerabilities in IBM WebSphere Application Server Liberty

Summary IBM MQ Console has addressed multiple vulnerabilities in IBM WebSphere Application Server Liberty Vulnerability Details CVEID:CVE-2026-14981 DESCRIPTION: IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty are affected by a denial of service vulnerability in th...

Security Bulletin: IBM MQ console is affected by a remote code execution and path-segment injection vulnerability (CVE-2026-14976, CVE-2026-15280)

Summary IBM MQ Console has addressed a remote code execution and path-segment injection vulnerability in WebSphere Application Server Liberty Vulnerability Details CVEID:CVE-2026-14976 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by remote code...

Security Bulletin: IBM MQ Console is affected by a denial of service vulnerability (CVE-2026-16192)

Summary IBM MQ Console has addressed a denial of service vulnerability in IBM WebSphere Application Server Liberty Vulnerability Details CVEID:CVE-2026-16192 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of service vulnerability when the...

Security Bulletin: IBM MQ console is affected by a denial of service vulnerability (CVE-2026-10571)

Summary IBM MQ console has addressed a denial of service vulnerability in IBM WebSphere Application Server Liberty Vulnerability Details CVEID:CVE-2026-10571 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of service caused by insecure...

Security Bulletin: IBM MQ is affected by an authentication bypass in IBM WebSphere Application Server Liberty (CVE-2026-14525)

Summary IBM MQ has addressed an authentication bypass in IBM WebSphere Application Server Liberty Vulnerability Details CVEID:CVE-2026-14525 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 IBM WebSphere Application Server Liberty is vulnerable to an authenticatio...

Security Bulletin: IBM MQ is affected by a privilege escalation in WebSphere Application Server Liberty (CVE-2026-18499)

Summary IBM MQ has addressed a privilege escalation in WebSphere Application Server Liberty Vulnerability Details CVEID:CVE-2026-18499 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to a privilege escalation when using Liberty collectives...

Security Bulletin: IBM MQ is affected by multiple vulnerabilities in IBM WebSphere Application Server Liberty (CVE-2026-66142,CVE-2026-66143,CVE-2026-66144)

Summary Multiple issues were identified with IBM WebSphere Application Server Liberty, which IBM MQ ships and uses to supply IBM MQ Console and IBM MQ REST API functionality. Vulnerability Details CVEID:CVE-2026-66142 DESCRIPTION: Apache Neethi is vulnerable to uncontrolled recursion when parsing...

Security Bulletin: Security Vulnerabilities were found in IBM WebSphere Application Server Liberty provided with IBM Security Verify Directory (CVE-2025-14923)

Summary Security Vulnerabilities were addressed in IBM WebSphere Application Server Liberty provided with IBM Security Verify Directory Vulnerability Details CVEID:CVE-2025-14923 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.2 IBM WebSphere Application Server...