Advisories · Technology

IBM WebSphere Application Server - Liberty.

Every CVE that names IBM WebSphere Application Server - Liberty among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-93905 CVE record

CVSS 8.2 High

IBM WebSphere Application Server Liberty is affected by a deserialization of untrusted data
- IBM WebSphere Application Server - Liberty
- Insecure deserialization
Not analysed yet 13 Oct 2026
CVE-2026-93909 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

IBM WebSphere Application Server Liberty is affected by an authentication bypass
- IBM WebSphere Application Server - Liberty
- Authentication bypass
Not analysed yet 13 Oct 2026
CVE-2026-93895 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

IBM WebSphere Application Server Liberty Improper Access Control
- IBM WebSphere Application Server - Liberty
- Broken access control
Not analysed yet 13 Oct 2026
CVE-2026-95695 CVE record

CVSS 7.4 High

IBM WebSphere Application Server Liberty Incorrect Authorization
- IBM WebSphere Application Server - Liberty
- Broken access control
Not analysed yet 13 Oct 2026
CVE-2026-95696 CVE record

CVSS 6.5 Medium

IBM WebSphere Application Server Liberty Denial of Service
- IBM WebSphere Application Server - Liberty
- Denial of service
Not analysed yet 13 Oct 2026
CVE-2026-101294 CVE record

CVSS 8.7 High

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a missing cryptographic step
- IBM WebSphere Application Server - Liberty
- IBM WebSphere Application Server
- CWE-325
Not analysed yet 13 Oct 2026
CVE-2026-105442 CVE record

CVSS 7.5 High

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a deserialization of untrusted data
- IBM WebSphere Application Server
- IBM WebSphere Application Server - Liberty
- Insecure deserialization
Not analysed yet 13 Oct 2026
CVE-2026-105443 CVE record

CVSS 8.2 High

IBM WebSphere Application Server Liberty is affected by an improper access control
- IBM WebSphere Application Server - Liberty
- Broken access control
Not analysed yet 13 Oct 2026
CVE-2026-11713 CVE record

CVSS 5.4 Medium

IBM WebSphere Application Server Liberty Incorrect Authorization
- IBM WebSphere Application Server - Liberty
- Broken access control
Not analysed yet 13 Oct 2026
CVE-2026-14532 CVE record

CVSS 4.3 Medium

IBM WebSphere Application Server Liberty Integer Overflow
- IBM WebSphere Application Server - Liberty
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2026-14909 CVE record

CVSS 6.5 Medium

IBM WebSphere Application Server Liberty Information Disclosure
- IBM WebSphere Application Server - Liberty
- Information disclosure
Not analysed yet 13 Oct 2026
CVE-2026-77816 CVE record

CVSS 6.5 Medium

IBM WebSphere Application Server Liberty Improper Certificate Validation
- IBM WebSphere Application Server - Liberty
- Weak cryptography or TLS
Not analysed yet 13 Oct 2026
CVE-2026-79715 CVE record

CVSS 5.5 Medium

IBM WebSphere Application Server Liberty Path Traversal
- IBM WebSphere Application Server - Liberty
- Path traversal
Not analysed yet 13 Oct 2026
CVE-2026-103499 CVE record

CVSS 7.5 High

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service
- IBM WebSphere Application Server - Liberty
- IBM WebSphere Application Server
- Denial of service
Not analysed yet 13 Oct 2026
CVE-2026-11722 CVE record

CVSS 4.8 Medium

IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty HTTP Request Smuggling
- IBM WebSphere Application Server
- IBM WebSphere Application Server - Liberty
- HTTP request smuggling
Not analysed yet 18 Sept 2026
CVE-2026-11549 CVE record

CVSS 6.5 Medium

IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty Improper Access Control
- IBM WebSphere Application Server
- IBM WebSphere Application Server - Liberty
- Broken access control
Not analysed yet 18 Sept 2026
CVE-2026-11548 CVE record

CVSS 4.8 Medium

IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty HTTP Request Smuggling
- IBM WebSphere Application Server
- IBM WebSphere Application Server - Liberty
- HTTP request smuggling
Not analysed yet 18 Sept 2026
CVE-2026-10841 CVE record

CVSS 4.8 Medium

IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty HTTP Request Smuggling
- IBM WebSphere Application Server
- IBM WebSphere Application Server - Liberty
- HTTP request smuggling
Not analysed yet 18 Sept 2026
CVE-2026-15396 CVE record

CVSS 6.5 Medium

IBM WebSphere Application Server IBM WebSphere Application Server - Liberty HTTP Request Smuggling
- IBM WebSphere Application Server
- IBM WebSphere Application Server - Liberty
- HTTP request smuggling
Not analysed yet 14 Sept 2026
CVE-2026-15412 CVE record

CVSS 6.5 Medium

IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty Open Redirect
- IBM WebSphere Application Server
- IBM WebSphere Application Server - Liberty
- Open redirect
Not analysed yet 14 Sept 2026
CVE-2026-15634 CVE record

CVSS 6.5 Medium

IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty Request Smuggling
- IBM WebSphere Application Server
- IBM WebSphere Application Server - Liberty
- HTTP request smuggling
Not analysed yet 14 Sept 2026
CVE-2026-14525 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

IBM WebSphere Application Server Liberty is affected by an authenication bypass
- IBM WebSphere Application Server - Liberty
- Authentication bypass
Not analysed yet 13 Aug 2026
CVE-2026-10571 CVE record

CVSS 5.7 Medium

IBM WebSphere Application Server Liberty is affected by a denial of service
- IBM WebSphere Application Server - Liberty
- Insecure deserialization
Not analysed yet 13 Aug 2026
CVE-2026-18499 CVE record

CVSS 8.1 High

IBM WebSphere Application Server Liberty is affected by a privilege escalation
- IBM WebSphere Application Server - Liberty
- Broken access control
Not analysed yet 12 Aug 2026
CVE-2026-8400 CVE record

CVSS 8.1 High

Multiple Vulnerabilities in IBM® Java SDK affect IBM WebSphere Application Server and WebSphere Application Server Liberty due to the July 2026 CPU
- IBM WebSphere Application Server
- IBM WebSphere Application Server - Liberty
- Code injection
Not analysed yet 5 Aug 2026
CVE-2026-9322 CVE record

CVSS 7.5 High

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities
- IBM WebSphere Application Server
- IBM WebSphere Application Server - Liberty
- Denial of service
Not analysed yet 30 Jul 2026
CVE-2026-10842 CVE record

CVSS 7.5 High

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a security bypass vulnerability
- IBM WebSphere Application Server
- IBM WebSphere Application Server - Liberty
- CWE-289
Not analysed yet 30 Jul 2026
CVE-2026-11897 CVE record

CVSS 7.5 High

IBM WebSphere Application Server Liberty is affected by a denial of service vulnerability with HTTP/2
- IBM WebSphere Application Server - Liberty
- Denial of service
Not analysed yet 30 Jul 2026
CVE-2026-14980 CVE record

CVSS 8.3 High

IBM WebSphere Application Server Liberty is affected by a cross-site request forgery
- IBM WebSphere Application Server - Liberty
- Privilege escalation
Not analysed yet 30 Jul 2026
CVE-2026-2482 CVE record

CVSS 3.1 Low

IBM WebSphere Application Server Liberty is affected by a cross-site request forgery
- IBM WebSphere Application Server - Liberty
- Cross-site request forgery (CSRF)
Not analysed yet 29 Jul 2026
CVE-2026-14529 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a server-side request forgery
- IBM WebSphere Application Server
- IBM WebSphere Application Server - Liberty
- Authentication bypass
Not analysed yet 29 Jul 2026
CVE-2026-14976 CVE record

CVSS 7.1 High

IBM WebSphere Application Server Liberty is affected by a remote code execution and path-segment injection vulnerability
- IBM WebSphere Application Server - Liberty
- Authentication bypass
Not analysed yet 28 Jul 2026
CVE-2026-14981 CVE record

CVSS 7.5 High

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities
- IBM WebSphere Application Server
- IBM WebSphere Application Server - Liberty
- Denial of service
Not analysed yet 28 Jul 2026
CVE-2026-15057 CVE record

CVSS 7.5 High

IBM WebSphere Application Server Liberty is affected by a denial of service vulnerability
- IBM WebSphere Application Server - Liberty
- Memory corruption
Not analysed yet 28 Jul 2026
CVE-2026-15064 CVE record

CVSS 8.7 High

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities
- IBM WebSphere Application Server
- IBM WebSphere Application Server - Liberty
- HTTP request smuggling
Not analysed yet 28 Jul 2026
CVE-2026-15280 CVE record

CVSS 7.5 High

IBM WebSphere Application Server Liberty is affected by a remote code execution and path-segment injection vulnerability
- IBM WebSphere Application Server - Liberty
- Path traversal
Not analysed yet 28 Jul 2026
CVE-2026-15325 CVE record

CVSS 8.7 High

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities
- IBM WebSphere Application Server
- IBM WebSphere Application Server - Liberty
- HTTP request smuggling
Not analysed yet 28 Jul 2026
CVE-2026-15328 CVE record

CVSS 7.4 High

IBM WebSphere Application Server and WebSphere Application Server Liberty is inconsistent Interpretation of HTTP Requests
- IBM WebSphere Application Server
- IBM WebSphere Application Server - Liberty
- HTTP request smuggling
Not analysed yet 28 Jul 2026
CVE-2026-16192 CVE record

CVSS 7.1 High

IBM WebSphere Application Server Liberty is affected by a denial of service
- IBM WebSphere Application Server - Liberty
- Denial of service
Not analysed yet 28 Jul 2026
CVE-2026-11546 CVE record

CVSS 7.1 High

IBM WebSphere Application Server Liberty is affected by a server-side request forgery vulnerability
- IBM WebSphere Application Server - Liberty
- Server-side request forgery (SSRF)
Not analysed yet 30 Jun 2026
CVE-2026-11714 CVE record

CVSS 8.5 High

IBM WebSphere Application Server Liberty is affected by an authorization bypass vulnerability
- IBM WebSphere Application Server - Liberty
- Server-side request forgery (SSRF)
Not analysed yet 30 Jun 2026
CVE-2026-11806 CVE record

CVSS 7.2 High

IBM WebSphere Application Server Liberty is affected by a an arbitrary file read vulnerability
- IBM WebSphere Application Server - Liberty
- HTTP request smuggling
Not analysed yet 30 Jun 2026
CVE-2026-9320 CVE record

CVSS 5.9 Medium

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities
- IBM WebSphere Application Server
- IBM WebSphere Application Server - Liberty
- Denial of service
Not analysed yet 22 Jun 2026
CVE-2026-9071 CVE record

CVSS 7.5 High

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by Uncontrolled Resource Consumption
- IBM WebSphere Application Server
- IBM WebSphere Application Server - Liberty
- Denial of service
Not analysed yet 22 Jun 2026
CVE-2026-8646 CVE record

CVSS 7.4 High

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities
- IBM WebSphere Application Server
- IBM WebSphere Application Server - Liberty
- HTTP request smuggling
Not analysed yet 22 Jun 2026
CVE-2026-5516 CVE record

CVSS 4.4 Medium

IBM WebSphere Application Server Liberty is affected by a security bypass vulnerability
- IBM WebSphere Application Server - Liberty
- Race condition
Not analysed yet 27 May 2026
CVE-2026-4410 CVE record

CVSS 4.8 Medium

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service
- IBM WebSphere Application Server - Liberty
- IBM WebSphere Application Server
- Denial of service
Not analysed yet 27 May 2026
CVE-2026-3621 CVE record

CVSS 7.5 High

IBM WebSphere Application Server Liberty is affected by identity spoofing
- IBM WebSphere Application Server - Liberty
- Privilege escalation
Not analysed yet 22 Apr 2026
CVE-2025-14917 CVE record

CVSS 6.7 Medium

IBM WebSphere Application Server Liberty could provide weaker than expected security
- IBM WebSphere Application Server - Liberty
- CWE-1393
Not analysed yet 25 Mar 2026
CVE-2025-14915 CVE record

CVSS 6.5 Medium

IBM WebSphere Application Server Liberty is affected by a privilege escalation vulnerability
- IBM WebSphere Application Server - Liberty
- Information disclosure
Not analysed yet 25 Mar 2026
CVE-2026-1561 CVE record

CVSS 5.4 Medium

IBM WebSphere Application Server Liberty Server-Side Request Forgery
- IBM WebSphere Application Server Liberty
- Server-side request forgery (SSRF)
Not analysed yet 25 Mar 2026
CVE-2025-14923 CVE record

CVSS 4.7 Medium

IBM WebSphere Application Server Liberty could provide weaker than expected security
- IBM WebSphere Application Server - Liberty
- Hard-coded credentials
Not analysed yet 3 Mar 2026
CVE-2025-14914 CVE record

CVSS 7.6 High

IBM WebSphere Application Server Liberty Path Traversal
- IBM WebSphere Application Server Liberty
- Path traversal
Not analysed yet 2 Feb 2026
CVE-2025-12635 CVE record

CVSS 5.4 Medium

IBM WebSphere Application Server and WebSphere Application Server Liberty Cross-Site Scripting
- IBM WebSphere Application Server
- IBM WebSphere Application Server Liberty
- Cross-site scripting (XSS)
Not analysed yet 8 Dec 2025
CVE-2025-36047 CVE record

CVSS 5.3 Medium

IBM WebSphere Application Server Liberty denial of service
- IBM WebSphere Application Server Liberty
- Denial of service
Not analysed yet 14 Aug 2025
CVE-2025-36000 CVE record

CVSS 4.4 Medium

IBM WebSphere Application Server Liberty cross-site scripting
- IBM WebSphere Application Server Liberty
- Cross-site scripting (XSS)
Not analysed yet 12 Aug 2025
CVE-2025-36124 CVE record

CVSS 5.9 Medium

IBM WebSphere Application Server Liberty bypass security
- IBM WebSphere Application Server Liberty
- Privilege escalation
Not analysed yet 12 Aug 2025
CVE-2024-56339 CVE record

CVSS 3.7 Low

IBM WebSphere Application Server information disclosure
- IBM WebSphere Application Server
- IBM WebSphere Application Server Liberty
- CWE-650
Not analysed yet 7 Aug 2025
CVE-2025-36097 CVE record

CVSS 7.5 High

IBM WebSphere Application Server denial of service
- IBM WebSphere Application Server
- IBM WebSphere Application Server Liberty
- Memory corruption
Not analysed yet 16 Jul 2025
CVE-2024-25026 CVE record

CVSS 5.9 Medium

IBM WebSphere Application Server denial of service
- IBM WebSphere Application Server
- IBM WebSphere Application Server Liberty
- Denial of service
Not analysed yet 25 Apr 2024