CVE-2026-14515

creationtimestamp| type| source ---|---|--- 2026-07-30 04:51:00+00:00| seen| https://www.hkcert.org/security-bulletin/ibm-websphere-products-multiple-vulnerabilities20260730...

CVE-2026-14980

creationtimestamp| type| source ---|---|--- 2026-07-30 04:50:57+00:00| seen| https://www.hkcert.org/security-bulletin/ibm-websphere-products-multiple-vulnerabilities20260730 2026-08-06 00:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mseqpkrd5b2r...

CVE-2026-14528

creationtimestamp| type| source ---|---|--- 2026-07-30 04:48:03+00:00| seen| https://www.hkcert.org/security-bulletin/ibm-websphere-products-multiple-vulnerabilities20260730...

CVE-2026-15280

creationtimestamp| type| source ---|---|--- 2026-07-30 04:47:44+00:00| seen| https://www.hkcert.org/security-bulletin/ibm-websphere-products-multiple-vulnerabilities20260730...

CVE-2026-15328

creationtimestamp| type| source ---|---|--- 2026-07-30 04:46:57+00:00| seen| https://www.hkcert.org/security-bulletin/ibm-websphere-products-multiple-vulnerabilities20260730...

IBM WebSphere Application Server path segment injection vulnerability

IBM WebSphere Application Server - Liberty is a lightweight, modular Java runtime environment developed by IBM. IBM WebSphere Application Server - Liberty has a path traversal vulnerability, which stems from a path traversal flaw in the collective routing mechanism. Attackers can exploit this...

PT-2026-66480

IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by a cross-site scripting vulnerability in the administrative console login page...

IBM WebSphere Application Server Liberty resource management error vulnerability (CNVD-2026-31547)

IBM WebSphere Application Server Liberty is an application server runtime environment developed by American company IBM. There is a resource management vulnerability in IBM WebSphere Application Server Liberty, which stems from a flaw in the restConnector-2.0 feature when it is enabled. This...

IBM WebSphere Application Server deserialization vulnerability (CNVD-2026-31549)

IBM WebSphere Application Server is an application server product from IBM. There is a security vulnerability in IBM WebSphere Application Server. This vulnerability stems from the lack of adequate security checks during the serialization data processing process, allowing unauthenticated users to...

CVE-2026-11383: Improper Neutralization of Input During Web Page Generation

IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by cross-site scripting in the Administrative Console...

PT-2026-66486

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to cross-site request forgery which could allow an attacker to perform SSRF attacks with elevated privileges when the collectiveController-1.0 feature is enabled...

CVE-2026-9322: Uncontrolled Resource Consumption

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 are vulnerable to a denial of service via a crafted HTTP request...

CVE-2026-11897: Allocation of Resources Without Limits or Throttling

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources...

PT-2026-66479

IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by cross-site scripting in the Administrative Console...

PT-2026-66481

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources...

IBM WebSphere Application Server Input Validation Vulnerability (CNVD-2026-31548)

IBM WebSphere Application Server is an application server product developed by IBM. There is a security vulnerability in IBM WebSphere Application Server, which stems from improper handling of HTTP version tokens. Attackers can exploit this vulnerability to perform HTTP response smuggling attacks...

PT-2026-66532

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 are vulnerable to a denial of service via a crafted HTTP request...

CVE-2026-14980: Improper Privilege Management

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to cross-site request forgery which could allow an attacker to perform SSRF attacks with elevated privileges when the collectiveController-1.0 feature is enabled...

CVE-2026-11536: Deserialization of Untrusted Data

IBM WebSphere Application Server 9.0, and 8.5 is affected by a remote code execution vulnerability in the SOAP/JMX connector...

CVE-2026-10842: Authentication Bypass by Alternate Name

IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 Traditional and Liberty could allow a remote attacker to bypass security constraints...