# IBM WebSphere Application Server - Liberty.

Every CVE that names IBM WebSphere Application Server - Liberty among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [IBM WebSphere Application Server Liberty is affected by a deserialization of untrusted data](https://agentprime.io/advisories/CVE-2026-93905.md)
  `CVE-2026-93905` · CVE record: IBM WebSphere Application Server - Liberty · CVSS 8.2 High · Not analysed yet · Published 13 Oct 2026 · Tags: Insecure deserialization
- [IBM WebSphere Application Server Liberty is affected by an authentication bypass](https://agentprime.io/advisories/CVE-2026-93909.md)
  `CVE-2026-93909` · CVE record: IBM WebSphere Application Server - Liberty · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Authentication bypass
- [IBM WebSphere Application Server Liberty Improper Access Control](https://agentprime.io/advisories/CVE-2026-93895.md)
  `CVE-2026-93895` · CVE record: IBM WebSphere Application Server - Liberty · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Broken access control
- [IBM WebSphere Application Server Liberty Incorrect Authorization](https://agentprime.io/advisories/CVE-2026-95695.md)
  `CVE-2026-95695` · CVE record: IBM WebSphere Application Server - Liberty · CVSS 7.4 High · Not analysed yet · Published 13 Oct 2026 · Tags: Broken access control
- [IBM WebSphere Application Server Liberty Denial of Service](https://agentprime.io/advisories/CVE-2026-95696.md)
  `CVE-2026-95696` · CVE record: IBM WebSphere Application Server - Liberty · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Denial of service
- [IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a missing cryptographic step](https://agentprime.io/advisories/CVE-2026-101294.md)
  `CVE-2026-101294` · CVE record: IBM WebSphere Application Server - Liberty and 1 more · CVSS 8.7 High · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-325
- [IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a deserialization of untrusted data](https://agentprime.io/advisories/CVE-2026-105442.md)
  `CVE-2026-105442` · CVE record: IBM WebSphere Application Server and 1 more · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Insecure deserialization
- [IBM WebSphere Application Server Liberty is affected by an improper access control](https://agentprime.io/advisories/CVE-2026-105443.md)
  `CVE-2026-105443` · CVE record: IBM WebSphere Application Server - Liberty · CVSS 8.2 High · Not analysed yet · Published 13 Oct 2026 · Tags: Broken access control
- [IBM WebSphere Application Server Liberty Incorrect Authorization](https://agentprime.io/advisories/CVE-2026-11713.md)
  `CVE-2026-11713` · CVE record: IBM WebSphere Application Server - Liberty · CVSS 5.4 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Broken access control
- [IBM WebSphere Application Server Liberty Integer Overflow](https://agentprime.io/advisories/CVE-2026-14532.md)
  `CVE-2026-14532` · CVE record: IBM WebSphere Application Server - Liberty · CVSS 4.3 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [IBM WebSphere Application Server Liberty Information Disclosure](https://agentprime.io/advisories/CVE-2026-14909.md)
  `CVE-2026-14909` · CVE record: IBM WebSphere Application Server - Liberty · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Information disclosure
- [IBM WebSphere Application Server Liberty Improper Certificate Validation](https://agentprime.io/advisories/CVE-2026-77816.md)
  `CVE-2026-77816` · CVE record: IBM WebSphere Application Server - Liberty · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Weak cryptography or TLS
- [IBM WebSphere Application Server Liberty Path Traversal](https://agentprime.io/advisories/CVE-2026-79715.md)
  `CVE-2026-79715` · CVE record: IBM WebSphere Application Server - Liberty · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service](https://agentprime.io/advisories/CVE-2026-103499.md)
  `CVE-2026-103499` · CVE record: IBM WebSphere Application Server - Liberty and 1 more · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Denial of service
- [IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty HTTP Request Smuggling](https://agentprime.io/advisories/CVE-2026-11722.md)
  `CVE-2026-11722` · CVE record: IBM WebSphere Application Server and 1 more · CVSS 4.8 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: HTTP request smuggling
- [IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty Improper Access Control](https://agentprime.io/advisories/CVE-2026-11549.md)
  `CVE-2026-11549` · CVE record: IBM WebSphere Application Server and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Broken access control
- [IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty HTTP Request Smuggling](https://agentprime.io/advisories/CVE-2026-11548.md)
  `CVE-2026-11548` · CVE record: IBM WebSphere Application Server and 1 more · CVSS 4.8 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: HTTP request smuggling
- [IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty HTTP Request Smuggling](https://agentprime.io/advisories/CVE-2026-10841.md)
  `CVE-2026-10841` · CVE record: IBM WebSphere Application Server and 1 more · CVSS 4.8 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: HTTP request smuggling
- [IBM WebSphere Application Server IBM WebSphere Application Server - Liberty HTTP Request Smuggling](https://agentprime.io/advisories/CVE-2026-15396.md)
  `CVE-2026-15396` · CVE record: IBM WebSphere Application Server and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: HTTP request smuggling
- [IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty Open Redirect](https://agentprime.io/advisories/CVE-2026-15412.md)
  `CVE-2026-15412` · CVE record: IBM WebSphere Application Server and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Open redirect
- [IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty Request Smuggling](https://agentprime.io/advisories/CVE-2026-15634.md)
  `CVE-2026-15634` · CVE record: IBM WebSphere Application Server and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: HTTP request smuggling
- [IBM WebSphere Application Server Liberty is affected by an authenication bypass](https://agentprime.io/advisories/CVE-2026-14525.md)
  `CVE-2026-14525` · CVE record: IBM WebSphere Application Server - Liberty · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Aug 2026 · Tags: Authentication bypass
- [IBM WebSphere Application Server Liberty is affected by a denial of service](https://agentprime.io/advisories/CVE-2026-10571.md)
  `CVE-2026-10571` · CVE record: IBM WebSphere Application Server - Liberty · CVSS 5.7 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Insecure deserialization
- [IBM WebSphere Application Server Liberty is affected by a privilege escalation](https://agentprime.io/advisories/CVE-2026-18499.md)
  `CVE-2026-18499` · CVE record: IBM WebSphere Application Server - Liberty · CVSS 8.1 High · Not analysed yet · Published 12 Aug 2026 · Tags: Broken access control
- [Multiple Vulnerabilities in IBM® Java SDK affect IBM WebSphere Application Server and WebSphere Application Server Liberty due to the July 2026 CPU](https://agentprime.io/advisories/CVE-2026-8400.md)
  `CVE-2026-8400` · CVE record: IBM WebSphere Application Server and 1 more · CVSS 8.1 High · Not analysed yet · Published 5 Aug 2026 · Tags: Code injection
- [IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities](https://agentprime.io/advisories/CVE-2026-9322.md)
  `CVE-2026-9322` · CVE record: IBM WebSphere Application Server and 1 more · CVSS 7.5 High · Not analysed yet · Published 30 Jul 2026 · Tags: Denial of service
- [IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a security bypass vulnerability](https://agentprime.io/advisories/CVE-2026-10842.md)
  `CVE-2026-10842` · CVE record: IBM WebSphere Application Server and 1 more · CVSS 7.5 High · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-289
- [IBM WebSphere Application Server Liberty is affected by a denial of service vulnerability with HTTP/2](https://agentprime.io/advisories/CVE-2026-11897.md)
  `CVE-2026-11897` · CVE record: IBM WebSphere Application Server - Liberty · CVSS 7.5 High · Not analysed yet · Published 30 Jul 2026 · Tags: Denial of service
- [IBM WebSphere Application Server Liberty is affected by a cross-site request forgery](https://agentprime.io/advisories/CVE-2026-14980.md)
  `CVE-2026-14980` · CVE record: IBM WebSphere Application Server - Liberty · CVSS 8.3 High · Not analysed yet · Published 30 Jul 2026 · Tags: Privilege escalation
- [IBM WebSphere Application Server Liberty is affected by a cross-site request forgery](https://agentprime.io/advisories/CVE-2026-2482.md)
  `CVE-2026-2482` · CVE record: IBM WebSphere Application Server - Liberty · CVSS 3.1 Low · Not analysed yet · Published 29 Jul 2026 · Tags: Cross-site request forgery (CSRF)
- [IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a server-side request forgery](https://agentprime.io/advisories/CVE-2026-14529.md)
  `CVE-2026-14529` · CVE record: IBM WebSphere Application Server and 1 more · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Jul 2026 · Tags: Authentication bypass
- [IBM WebSphere Application Server Liberty is affected by a remote code execution and path-segment injection vulnerability](https://agentprime.io/advisories/CVE-2026-14976.md)
  `CVE-2026-14976` · CVE record: IBM WebSphere Application Server - Liberty · CVSS 7.1 High · Not analysed yet · Published 28 Jul 2026 · Tags: Authentication bypass
- [IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities](https://agentprime.io/advisories/CVE-2026-14981.md)
  `CVE-2026-14981` · CVE record: IBM WebSphere Application Server and 1 more · CVSS 7.5 High · Not analysed yet · Published 28 Jul 2026 · Tags: Denial of service
- [IBM WebSphere Application Server Liberty is affected by a denial of service vulnerability](https://agentprime.io/advisories/CVE-2026-15057.md)
  `CVE-2026-15057` · CVE record: IBM WebSphere Application Server - Liberty · CVSS 7.5 High · Not analysed yet · Published 28 Jul 2026 · Tags: Memory corruption
- [IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities](https://agentprime.io/advisories/CVE-2026-15064.md)
  `CVE-2026-15064` · CVE record: IBM WebSphere Application Server and 1 more · CVSS 8.7 High · Not analysed yet · Published 28 Jul 2026 · Tags: HTTP request smuggling
- [IBM WebSphere Application Server Liberty is affected by a remote code execution and path-segment injection vulnerability](https://agentprime.io/advisories/CVE-2026-15280.md)
  `CVE-2026-15280` · CVE record: IBM WebSphere Application Server - Liberty · CVSS 7.5 High · Not analysed yet · Published 28 Jul 2026 · Tags: Path traversal
- [IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities](https://agentprime.io/advisories/CVE-2026-15325.md)
  `CVE-2026-15325` · CVE record: IBM WebSphere Application Server and 1 more · CVSS 8.7 High · Not analysed yet · Published 28 Jul 2026 · Tags: HTTP request smuggling
- [IBM WebSphere Application Server and WebSphere Application Server Liberty is inconsistent Interpretation of HTTP Requests](https://agentprime.io/advisories/CVE-2026-15328.md)
  `CVE-2026-15328` · CVE record: IBM WebSphere Application Server and 1 more · CVSS 7.4 High · Not analysed yet · Published 28 Jul 2026 · Tags: HTTP request smuggling
- [IBM WebSphere Application Server Liberty is affected by a denial of service](https://agentprime.io/advisories/CVE-2026-16192.md)
  `CVE-2026-16192` · CVE record: IBM WebSphere Application Server - Liberty · CVSS 7.1 High · Not analysed yet · Published 28 Jul 2026 · Tags: Denial of service
- [IBM WebSphere Application Server Liberty is affected by a server-side request forgery vulnerability](https://agentprime.io/advisories/CVE-2026-11546.md)
  `CVE-2026-11546` · CVE record: IBM WebSphere Application Server - Liberty · CVSS 7.1 High · Not analysed yet · Published 30 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [IBM WebSphere Application Server Liberty is affected by an authorization bypass vulnerability](https://agentprime.io/advisories/CVE-2026-11714.md)
  `CVE-2026-11714` · CVE record: IBM WebSphere Application Server - Liberty · CVSS 8.5 High · Not analysed yet · Published 30 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [IBM WebSphere Application Server Liberty is affected by a an arbitrary file read vulnerability](https://agentprime.io/advisories/CVE-2026-11806.md)
  `CVE-2026-11806` · CVE record: IBM WebSphere Application Server - Liberty · CVSS 7.2 High · Not analysed yet · Published 30 Jun 2026 · Tags: HTTP request smuggling
- [IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities](https://agentprime.io/advisories/CVE-2026-9320.md)
  `CVE-2026-9320` · CVE record: IBM WebSphere Application Server and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 22 Jun 2026 · Tags: Denial of service
- [IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by Uncontrolled Resource Consumption](https://agentprime.io/advisories/CVE-2026-9071.md)
  `CVE-2026-9071` · CVE record: IBM WebSphere Application Server and 1 more · CVSS 7.5 High · Not analysed yet · Published 22 Jun 2026 · Tags: Denial of service
- [IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities](https://agentprime.io/advisories/CVE-2026-8646.md)
  `CVE-2026-8646` · CVE record: IBM WebSphere Application Server and 1 more · CVSS 7.4 High · Not analysed yet · Published 22 Jun 2026 · Tags: HTTP request smuggling
- [IBM WebSphere Application Server Liberty is affected by a security bypass vulnerability](https://agentprime.io/advisories/CVE-2026-5516.md)
  `CVE-2026-5516` · CVE record: IBM WebSphere Application Server - Liberty · CVSS 4.4 Medium · Not analysed yet · Published 27 May 2026 · Tags: Race condition
- [IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service](https://agentprime.io/advisories/CVE-2026-4410.md)
  `CVE-2026-4410` · CVE record: IBM WebSphere Application Server - Liberty and 1 more · CVSS 4.8 Medium · Not analysed yet · Published 27 May 2026 · Tags: Denial of service
- [IBM WebSphere Application Server Liberty is affected by identity spoofing](https://agentprime.io/advisories/CVE-2026-3621.md)
  `CVE-2026-3621` · CVE record: IBM WebSphere Application Server - Liberty · CVSS 7.5 High · Not analysed yet · Published 22 Apr 2026 · Tags: Privilege escalation
- [IBM WebSphere Application Server Liberty could provide weaker than expected security](https://agentprime.io/advisories/CVE-2025-14917.md)
  `CVE-2025-14917` · CVE record: IBM WebSphere Application Server - Liberty · CVSS 6.7 Medium · Not analysed yet · Published 25 Mar 2026 · Tags: CWE-1393
- [IBM WebSphere Application Server Liberty is affected by a privilege escalation vulnerability](https://agentprime.io/advisories/CVE-2025-14915.md)
  `CVE-2025-14915` · CVE record: IBM WebSphere Application Server - Liberty · CVSS 6.5 Medium · Not analysed yet · Published 25 Mar 2026 · Tags: Information disclosure
- [IBM WebSphere Application Server Liberty Server-Side Request Forgery](https://agentprime.io/advisories/CVE-2026-1561.md)
  `CVE-2026-1561` · CVE record: IBM WebSphere Application Server Liberty · CVSS 5.4 Medium · Not analysed yet · Published 25 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [IBM WebSphere Application Server Liberty could provide weaker than expected security](https://agentprime.io/advisories/CVE-2025-14923.md)
  `CVE-2025-14923` · CVE record: IBM WebSphere Application Server - Liberty · CVSS 4.7 Medium · Not analysed yet · Published 3 Mar 2026 · Tags: Hard-coded credentials
- [IBM WebSphere Application Server Liberty Path Traversal](https://agentprime.io/advisories/CVE-2025-14914.md)
  `CVE-2025-14914` · CVE record: IBM WebSphere Application Server Liberty · CVSS 7.6 High · Not analysed yet · Published 2 Feb 2026 · Tags: Path traversal
- [IBM WebSphere Application Server and WebSphere Application Server Liberty Cross-Site Scripting](https://agentprime.io/advisories/CVE-2025-12635.md)
  `CVE-2025-12635` · CVE record: IBM WebSphere Application Server and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 8 Dec 2025 · Tags: Cross-site scripting (XSS)
- [IBM WebSphere Application Server Liberty denial of service](https://agentprime.io/advisories/CVE-2025-36047.md)
  `CVE-2025-36047` · CVE record: IBM WebSphere Application Server Liberty · CVSS 5.3 Medium · Not analysed yet · Published 14 Aug 2025 · Tags: Denial of service
- [IBM WebSphere Application Server Liberty cross-site scripting](https://agentprime.io/advisories/CVE-2025-36000.md)
  `CVE-2025-36000` · CVE record: IBM WebSphere Application Server Liberty · CVSS 4.4 Medium · Not analysed yet · Published 12 Aug 2025 · Tags: Cross-site scripting (XSS)
- [IBM WebSphere Application Server Liberty bypass security](https://agentprime.io/advisories/CVE-2025-36124.md)
  `CVE-2025-36124` · CVE record: IBM WebSphere Application Server Liberty · CVSS 5.9 Medium · Not analysed yet · Published 12 Aug 2025 · Tags: Privilege escalation
- [IBM WebSphere Application Server information disclosure](https://agentprime.io/advisories/CVE-2024-56339.md)
  `CVE-2024-56339` · CVE record: IBM WebSphere Application Server and 1 more · CVSS 3.7 Low · Not analysed yet · Published 7 Aug 2025 · Tags: CWE-650
- [IBM WebSphere Application Server denial of service](https://agentprime.io/advisories/CVE-2025-36097.md)
  `CVE-2025-36097` · CVE record: IBM WebSphere Application Server and 1 more · CVSS 7.5 High · Not analysed yet · Published 16 Jul 2025 · Tags: Memory corruption
- [IBM WebSphere Application Server denial of service](https://agentprime.io/advisories/CVE-2024-25026.md)
  `CVE-2024-25026` · CVE record: IBM WebSphere Application Server and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 25 Apr 2024 · Tags: Denial of service

Older: <https://agentprime.io/advisories/technology/ibm-websphere-application-server-liberty.md?cursor=WyIyMDI0LTA0LTI1VDEyOjE2OjI0LjQ4NzAwMFoiLCJDVkUtMjAyNC0yNTAyNiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=ibm-websphere-application-server-liberty>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/ibm-websphere-application-server-liberty/>. Everything for agents: <https://agentprime.io/llms.txt>.