# IBM WebSphere Application Server.

Every CVE that names IBM WebSphere Application Server among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [IBM WebSphere Application Server is affected by a remote code execution vulnerability](https://agentprime.io/advisories/CVE-2026-9319.md)
  `CVE-2026-9319` · CVE record: IBM WebSphere Application Server · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Jun 2026 · Tags: Insecure deserialization
- [IBM WebSphere Application Server is affected by remote code execution](https://agentprime.io/advisories/CVE-2026-9311.md)
  `CVE-2026-9311` · CVE record: IBM WebSphere Application Server · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Jun 2026 · Tags: Code injection
- [IBM WebSphere Application Server is affected by an identity spoofing vulnerability](https://agentprime.io/advisories/CVE-2026-8644.md)
  `CVE-2026-8644` · CVE record: IBM WebSphere Application Server · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Jun 2026 · Tags: Authentication bypass
- [IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service](https://agentprime.io/advisories/CVE-2026-4410.md)
  `CVE-2026-4410` · CVE record: IBM WebSphere Application Server - Liberty and 1 more · CVSS 4.8 Medium · Not analysed yet · Published 27 May 2026 · Tags: Denial of service
- [IBM WebSphere Application Server could provide weaker than expected security](https://agentprime.io/advisories/CVE-2025-13333.md)
  `CVE-2025-13333` · CVE record: IBM WebSphere Application Server · CVSS 4.4 Medium · Not analysed yet · Published 17 Feb 2026 · Tags: CWE-358
- [IBM WebSphere Application Server and WebSphere Application Server Liberty Cross-Site Scripting](https://agentprime.io/advisories/CVE-2025-12635.md)
  `CVE-2025-12635` · CVE record: IBM WebSphere Application Server and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 8 Dec 2025 · Tags: Cross-site scripting (XSS)
- [IBM WebSphere Application Server denial of service](https://agentprime.io/advisories/CVE-2025-36099.md)
  `CVE-2025-36099` · CVE record: IBM WebSphere Application Server · CVSS 4.9 Medium · Not analysed yet · Published 29 Sept 2025 · Tags: Denial of service
- [IBM WebSphere Application Server information disclosure](https://agentprime.io/advisories/CVE-2025-33142.md)
  `CVE-2025-33142` · CVE record: IBM WebSphere Application Server · CVSS 5.3 Medium · Not analysed yet · Published 14 Aug 2025 · Tags: Weak cryptography or TLS
- [IBM WebSphere Application Server information disclosure](https://agentprime.io/advisories/CVE-2024-56339.md)
  `CVE-2024-56339` · CVE record: IBM WebSphere Application Server and 1 more · CVSS 3.7 Low · Not analysed yet · Published 7 Aug 2025 · Tags: CWE-650
- [IBM WebSphere Application Server denial of service](https://agentprime.io/advisories/CVE-2025-36097.md)
  `CVE-2025-36097` · CVE record: IBM WebSphere Application Server and 1 more · CVSS 7.5 High · Not analysed yet · Published 16 Jul 2025 · Tags: Memory corruption
- [IBM WebSphere Application Server code execution](https://agentprime.io/advisories/CVE-2025-36038.md)
  `CVE-2025-36038` · CVE record: IBM WebSphere Application Server · CVSS 9.0 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.13 · Not analysed yet · Published 25 Jun 2025 · Tags: Insecure deserialization
- [IBM WebSphere Application Server cross](https://agentprime.io/advisories/CVE-2025-33104.md)
  `CVE-2025-33104` · CVE record: IBM WebSphere Application Server · CVSS 4.4 Medium · Not analysed yet · Published 14 May 2025 · Tags: Cross-site scripting (XSS)
- [IBM WebSphere Application Server server-side request forgery](https://agentprime.io/advisories/CVE-2025-27907.md)
  `CVE-2025-27907` · CVE record: IBM WebSphere Application Server · CVSS 4.1 Medium · Not analysed yet · Published 22 Apr 2025 · Tags: Server-side request forgery (SSRF)
- [IBM WebSphere Application Server cross-site scripting](https://agentprime.io/advisories/CVE-2024-45087.md)
  `CVE-2024-45087` · CVE record: IBM WebSphere Application Server · CVSS 4.8 Medium · Not analysed yet · Published 11 Nov 2024 · Tags: Cross-site scripting (XSS)
- [IBM WebSphere Application Server XML external entity injection](https://agentprime.io/advisories/CVE-2024-45086.md)
  `CVE-2024-45086` · CVE record: IBM WebSphere Application Server · CVSS 5.5 Medium · Not analysed yet · Published 4 Nov 2024 · Tags: XML external entities (XXE)
- [IBM WebSphere Application Server cross-site scripting](https://agentprime.io/advisories/CVE-2024-45071.md)
  `CVE-2024-45071` · CVE record: IBM WebSphere Application Server · CVSS 5.5 Medium · Not analysed yet · Published 16 Oct 2024 · Tags: Cross-site scripting (XSS)
- [IBM WebSphere Application Server XML external entity injection](https://agentprime.io/advisories/CVE-2024-45072.md)
  `CVE-2024-45072` · CVE record: IBM WebSphere Application Server · CVSS 5.5 Medium · Not analysed yet · Published 16 Oct 2024 · Tags: XML external entities (XXE)
- [IBM WebSphere Application Server denial of service](https://agentprime.io/advisories/CVE-2024-45085.md)
  `CVE-2024-45085` · CVE record: IBM WebSphere Application Server · CVSS 5.9 Medium · Not analysed yet · Published 15 Oct 2024 · Tags: CWE-754
- [IBM WebSphere Application Server cross-site scripting](https://agentprime.io/advisories/CVE-2024-45073.md)
  `CVE-2024-45073` · CVE record: IBM WebSphere Application Server · CVSS 4.8 Medium · Not analysed yet · Published 30 Sept 2024 · Tags: Cross-site scripting (XSS)
- [IBM WebSphere Application Server information disclosure](https://agentprime.io/advisories/CVE-2023-50315.md)
  `CVE-2023-50315` · CVE record: IBM WebSphere Application Server · CVSS 5.3 Medium · Not analysed yet · Published 14 Aug 2024 · Tags: Weak cryptography or TLS
- [IBM WebSphere Application Server code execution](https://agentprime.io/advisories/CVE-2024-35154.md)
  `CVE-2024-35154` · CVE record: IBM WebSphere Application Server · CVSS 7.2 High · Not analysed yet · Published 9 Jul 2024 · Tags: Privilege escalation
- [IBM WebSphere Application Server cross-site scripting](https://agentprime.io/advisories/CVE-2024-35153.md)
  `CVE-2024-35153` · CVE record: IBM WebSphere Application Server · CVSS 4.8 Medium · Not analysed yet · Published 27 Jun 2024 · Tags: Cross-site scripting (XSS)
- [IBM WebSphere Application Server identity spoofing](https://agentprime.io/advisories/CVE-2024-37532.md)
  `CVE-2024-37532` · CVE record: IBM WebSphere Application Server · CVSS 8.8 High · Not analysed yet · Published 20 Jun 2024 · Tags: Weak cryptography or TLS
- [IBM WebSphere Application Server denial of service](https://agentprime.io/advisories/CVE-2024-25026.md)
  `CVE-2024-25026` · CVE record: IBM WebSphere Application Server and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 25 Apr 2024 · Tags: Denial of service
- [IBM WebSphere Application Server server-side request forgery](https://agentprime.io/advisories/CVE-2024-22329.md)
  `CVE-2024-22329` · CVE record: IBM WebSphere Application Server and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 17 Apr 2024 · Tags: Server-side request forgery (SSRF)
- [IBM WebSphere Application Server XML external entity injection](https://agentprime.io/advisories/CVE-2024-22354.md)
  `CVE-2024-22354` · CVE record: IBM WebSphere Application Server and 1 more · CVSS 7.0 High · Not analysed yet · Published 17 Apr 2024 · Tags: XML external entities (XXE)
- [IBM WebSphere Application Server information disclosure](https://agentprime.io/advisories/CVE-2023-50313.md)
  `CVE-2023-50313` · CVE record: IBM WebSphere Application Server · CVSS 5.3 Medium · Not analysed yet · Published 2 Apr 2024 · Tags: Weak cryptography or TLS
- [IBM WebSphere Application Server information disclosure](https://agentprime.io/advisories/CVE-2023-35890.md)
  `CVE-2023-35890` · CVE record: IBM WebSphere Application Server · CVSS 5.1 Medium · Not analysed yet · Published 7 Jul 2023 · Tags: Weak cryptography or TLS
- [IBM WebSphere Application Server XML external entity injection](https://agentprime.io/advisories/CVE-2023-27554.md)
  `CVE-2023-27554` · CVE record: IBM WebSphere Application Server · CVSS 6.3 Medium · Not analysed yet · Published 11 May 2023 · Tags: XML external entities (XXE)
- [IBM WebSphere Application Server information disclosure](https://agentprime.io/advisories/CVE-2022-39161.md)
  `CVE-2022-39161` · CVE record: IBM WebSphere Application Server · CVSS 4.8 Medium · Not analysed yet · Published 3 May 2023 · Tags: Weak cryptography or TLS
- [IBM WebSphere Application Server cross-site scripting](https://agentprime.io/advisories/CVE-2023-24966.md)
  `CVE-2023-24966` · CVE record: IBM WebSphere Application Server · CVSS 6.1 Medium · Not analysed yet · Published 27 Apr 2023 · Tags: Cross-site scripting (XSS)
- [IBM WebSphere Application Server cross-site scripting](https://agentprime.io/advisories/CVE-2023-26283.md)
  `CVE-2023-26283` · CVE record: IBM WebSphere Application Server · CVSS 5.4 Medium · Not analysed yet · Published 22 Mar 2023 · Tags: Cross-site scripting (XSS)
- [IBM WebSphere Application Server code execution](https://agentprime.io/advisories/CVE-2023-23477.md)
  `CVE-2023-23477` · CVE record: IBM WebSphere Application Server · CVSS 8.1 High · Not analysed yet · Published 3 Feb 2023 · Tags: Code injection
- [IBM WebSphere Application Server information disclosure](https://agentprime.io/advisories/CVE-2022-43917.md)
  `CVE-2022-43917` · CVE record: IBM WebSphere Application Server · CVSS 5.9 Medium · Not analysed yet · Published 25 Jan 2023 · Tags: Weak cryptography or TLS
- [IBM WebSphere Application Server cross-site scripting](https://agentprime.io/advisories/CVE-2022-40750.md)
  `CVE-2022-40750` · CVE record: IBM WebSphere Application Server · CVSS 5.4 Medium · Not analysed yet · Published 11 Nov 2022 · Tags: Cross-site scripting (XSS)
- [Authentication bypass by spoofing in IBM WebSphere Application Server](https://agentprime.io/advisories/CVE-2022-38712.md)
  `CVE-2022-38712` · CVE record: IBM WebSphere Application Server · CVSS 5.9 Medium · Not analysed yet · Published 3 Nov 2022 · Tags: Authentication bypass
- [Server-side request forgery in IBM WebSphere Application Server](https://agentprime.io/advisories/CVE-2022-35282.md)
  `CVE-2022-35282` · CVE record: IBM WebSphere Application Server · CVSS 4.3 Medium · Not analysed yet · Published 28 Sept 2022 · Tags: Server-side request forgery (SSRF)
- [IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2022-34336.md)
  `CVE-2022-34336` · CVE record: IBM WebSphere Application Server · CVSS 5.4 Medium · Not analysed yet · Published 13 Sept 2022
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2022-34165.md)
  `CVE-2022-34165` · CVE record: IBM WebSphere Application Server and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 9 Sept 2022
- [IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2022-22477.md)
  `CVE-2022-22477` · CVE record: IBM WebSphere Application Server · CVSS 6.1 Medium · Not analysed yet · Published 14 Jul 2022
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2022-22473.md)
  `CVE-2022-22473` · CVE record: IBM WebSphere Application Server · CVSS 3.7 Low · Not analysed yet · Published 14 Jul 2022
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0…](https://agentprime.io/advisories/CVE-2022-22365.md)
  `CVE-2022-22365` · CVE record: IBM WebSphere Application Server · CVSS 5.6 Medium · Not analysed yet · Published 20 May 2022
- [IBM WebSphere Application Server Liberty: IBM WebSphere Application Server 9.0 and IBM WebSphere Application Server Liberty…](https://agentprime.io/advisories/CVE-2021-39038.md)
  `CVE-2021-39038` · CVE record: IBM WebSphere Application Server Liberty and 1 more · CVSS 4.4 Medium · Not analysed yet · Published 24 Feb 2022
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2021-38951.md)
  `CVE-2021-38951` · CVE record: IBM WebSphere Application Server · CVSS 7.5 High · Not analysed yet · Published 9 Dec 2021
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2021-29842.md)
  `CVE-2021-29842` · CVE record: IBM WebSphere Application Server and 1 more · CVSS 3.7 Low · Not analysed yet · Published 16 Sept 2021
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2021-29736.md)
  `CVE-2021-29736` · CVE record: IBM WebSphere Application Server · CVSS 5.0 Medium · Not analysed yet · Published 30 Jul 2021
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2021-29754.md)
  `CVE-2021-29754` · CVE record: IBM WebSphere Application Server · CVSS 4.2 Medium · Not analysed yet · Published 11 Jun 2021
- [IBM WebSphere Application Server: IBM WebSphere Application Server 8.0, 8.5, 9.0…](https://agentprime.io/advisories/CVE-2021-20492.md)
  `CVE-2021-20492` · CVE record: IBM WebSphere Application Server · CVSS 6.5 Medium · Not analysed yet · Published 26 May 2021
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2021-20454.md)
  `CVE-2021-20454` · CVE record: IBM WebSphere Application Server · CVSS 8.2 High · Not analysed yet · Published 21 Apr 2021
- [IBM WebSphere Application Server: IBM WebSphere Application Server 8.0, 8.5…](https://agentprime.io/advisories/CVE-2021-20453.md)
  `CVE-2021-20453` · CVE record: IBM WebSphere Application Server · CVSS 8.2 High · Not analysed yet · Published 20 Apr 2021
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0…](https://agentprime.io/advisories/CVE-2021-20480.md)
  `CVE-2021-20480` · CVE record: IBM WebSphere Application Server · CVSS 4.3 Medium · Not analysed yet · Published 8 Apr 2021
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2020-5016.md)
  `CVE-2020-5016` · CVE record: IBM WebSphere Application Server · CVSS 5.3 Medium · Not analysed yet · Published 10 Mar 2021
- [IBM WebSphere Application Server: IBM WebSphere Application Server 8.0, 8.5…](https://agentprime.io/advisories/CVE-2021-20354.md)
  `CVE-2021-20354` · CVE record: IBM WebSphere Application Server · CVSS 5.9 Medium · Not analysed yet · Published 18 Feb 2021
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2021-20353.md)
  `CVE-2021-20353` · CVE record: IBM WebSphere Application Server · CVSS 8.2 High · Not analysed yet · Published 10 Feb 2021
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2020-4949.md)
  `CVE-2020-4949` · CVE record: IBM WebSphere Application Server · CVSS 8.2 High · Not analysed yet · Published 26 Jan 2021
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2020-4782.md)
  `CVE-2020-4782` · CVE record: IBM WebSphere Application Server · CVSS 6.5 Medium · Not analysed yet · Published 28 Oct 2020
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.5, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2020-4576.md)
  `CVE-2020-4576` · CVE record: IBM WebSphere Application Server · CVSS 5.3 Medium · Not analysed yet · Published 1 Oct 2020
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2020-4629.md)
  `CVE-2020-4629` · CVE record: IBM WebSphere Application Server · CVSS 2.9 Low · Not analysed yet · Published 30 Sept 2020
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2020-4643.md)
  `CVE-2020-4643` · CVE record: IBM WebSphere Application Server · CVSS 7.5 High · Not analysed yet · Published 21 Sept 2020
- [IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2020-4578.md)
  `CVE-2020-4578` · CVE record: IBM WebSphere Application Server · CVSS 5.4 Medium · Not analysed yet · Published 10 Sept 2020

Newest: <https://agentprime.io/advisories/technology/ibm-websphere-application-server.md>
Older: <https://agentprime.io/advisories/technology/ibm-websphere-application-server.md?cursor=WyIyMDIwLTA5LTEwVDE2OjUwOjEzLjk2NTAwMFoiLCJDVkUtMjAyMC00NTc4Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=ibm-websphere-application-server&cursor=WyIyMDI2LTA2LTAxVDE4OjAxOjA2LjQ4MjAwMFoiLCJDVkUtMjAyNi05MzMwIl0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/ibm-websphere-application-server/?cursor=WyIyMDI2LTA2LTAxVDE4OjAxOjA2LjQ4MjAwMFoiLCJDVkUtMjAyNi05MzMwIl0>. Everything for agents: <https://agentprime.io/llms.txt>.