CVE-2025-14923

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.2 IBM WebSphere Application Server Liberty could provide weaker than expected security when using the Security Utility when administering security settings.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - psirt@us.ibm.com

Published

2026-03-03

Last modified

2026-03-04

Weaknesses

CWE-321, CWE-798

Affected products

• Websphere Application Server (Ibm)
• Websphere Application Server Liberty (Ibm)

References

• https://www.ibm.com/support/pages/node/7261761