CVE-2026-11707

CVE-2026-11707 affects IBM WebSphere Application Server shipped with Tivoli System Automation Application Manager 4.1. The issue is a cross-site scripting vulnerability in the administrative console login page. IBM bulletins for this family (CVE-2026-11594, CVE-2026-11707, CVE-2026-11383) documen...

CVE-2026-11707

IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by a cross-site scripting vulnerability in the administrative console login page...

EUVD-2026-51141

IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by a cross-site scripting vulnerability in the administrative console login page...

CVE-2026-11383

Summary of CVE-2026-11383 : IBM WebSphere Application Server (WAS) is affected by cross-site scripting (XSS) in the Administrative Console when shipped with Tivoli System Automation Application Manager 4.1 and related bundles. Connected documents confirm affected WAS versions include 8.5 and 9.0 ...

EUVD-2026-51140

IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by cross-site scripting in the Administrative Console...

CVE-2026-11383 Cross-site Scripting in IBM WebSphere Application Server shipped with Tivoli System Automation Application Manager

IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by cross-site scripting in the Administrative Console...

CVE-2026-14980 IBM WebSphere Application Server Liberty is affected by a cross-site request forgery

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to cross-site request forgery which could allow an attacker to perform SSRF attacks with elevated privileges when the collectiveController-1.0 feature is enabled...

CVE-2026-14980 IBM WebSphere Application Server Liberty is affected by a cross-site request forgery

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to cross-site request forgery which could allow an attacker to perform SSRF attacks with elevated privileges when the collectiveController-1.0 feature is enabled...

CVE-2026-14976

creationtimestamp| type| source ---|---|--- 2026-07-30 05:15:12+00:00| seen| https://www.hkcert.org/security-bulletin/ibm-websphere-products-multiple-vulnerabilities20260730...

CVE-2026-2482

creationtimestamp| type| source ---|---|--- 2026-07-30 05:15:05+00:00| seen| https://www.hkcert.org/security-bulletin/ibm-websphere-products-multiple-vulnerabilities20260730...

CVE-2026-14515

creationtimestamp| type| source ---|---|--- 2026-07-30 04:51:00+00:00| seen| https://www.hkcert.org/security-bulletin/ibm-websphere-products-multiple-vulnerabilities20260730...

CVE-2026-14980

creationtimestamp| type| source ---|---|--- 2026-07-30 04:50:57+00:00| seen| https://www.hkcert.org/security-bulletin/ibm-websphere-products-multiple-vulnerabilities20260730 2026-08-06 00:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mseqpkrd5b2r...

CVE-2026-14528

creationtimestamp| type| source ---|---|--- 2026-07-30 04:48:03+00:00| seen| https://www.hkcert.org/security-bulletin/ibm-websphere-products-multiple-vulnerabilities20260730...

CVE-2026-15280

creationtimestamp| type| source ---|---|--- 2026-07-30 04:47:44+00:00| seen| https://www.hkcert.org/security-bulletin/ibm-websphere-products-multiple-vulnerabilities20260730...

CVE-2026-15328

creationtimestamp| type| source ---|---|--- 2026-07-30 04:46:57+00:00| seen| https://www.hkcert.org/security-bulletin/ibm-websphere-products-multiple-vulnerabilities20260730...

PT-2026-66532

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 are vulnerable to a denial of service via a crafted HTTP request...

IBM WebSphere Application Server Liberty resource management error vulnerability (CNVD-2026-31547)

IBM WebSphere Application Server Liberty is an application server runtime environment developed by American company IBM. There is a resource management vulnerability in IBM WebSphere Application Server Liberty, which stems from a flaw in the restConnector-2.0 feature when it is enabled. This...

IBM WebSphere Application Server deserialization vulnerability (CNVD-2026-31549)

IBM WebSphere Application Server is an application server product from IBM. There is a security vulnerability in IBM WebSphere Application Server. This vulnerability stems from the lack of adequate security checks during the serialization data processing process, allowing unauthenticated users to...

IBM WebSphere Application Server Input Validation Vulnerability (CNVD-2026-31548)

IBM WebSphere Application Server is an application server product developed by IBM. There is a security vulnerability in IBM WebSphere Application Server, which stems from improper handling of HTTP version tokens. Attackers can exploit this vulnerability to perform HTTP response smuggling attacks...

Security Bulletin: A vulnerability has been identified in IBM WebSphere Application Server used by IBM Rational ClearQuest (CVE-2026-10842)

Summary IBM WebSphere Application Server is used by the IBM Rational ClearQuest server. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the...