Websphere Application Server@9.0 Security Vulnerabilities and Issues — Websphere Application Server@9.0 CVE List

Lucene search

IbmWebsphere Application Server9.0

4 matches found

CVE•added 2025/04/22 5:16 p.m.•77 views

CVE-2025-27907

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.

4.1CVSS6.8AI score0.00033EPSS

CVE•added 2025/05/14 7:15 p.m.•39 views

CVE-2025-33104

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

7.6CVSS6.3AI score0.00039EPSS

CVE•added 2025/06/25 9:15 p.m.•29 views

CVE-2025-36038

IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to execute arbitrary code on the system with a specially crafted sequence of serialized objects.

9.8CVSS8AI score0.00171EPSS

CVE•added 6 days ago•6 views

CVE-2025-36097

IBM WebSphere Application Server 9.0 and WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.7 are vulnerable to a denial of service, caused by a stack-based overflow. An attacker can send a specially crafted request that cause the server to consume excessive memory resources.

7.5CVSS6.5AI score0.00039EPSS