Websphere Application Server Liberty (Ibm) - vulnerabilities (CVEs)

20 CVEs, 0 in the last 30 days, 10 known versions, newest CVE from 2026-07-30. Vendor: Ibm.

CVEs of Websphere Application Server Liberty

CVE-2026-9322 - CVSS 7.5 (high), 2026-07-30: IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 are vulnerable to a denial of service…
CVE-2026-14981 - CVSS 7.5 (high), 2026-07-28: IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty are affected by a denial of service vulnerability in the HTTP channel due to…
CVE-2026-15057 - CVSS 7.5 (high), 2026-07-28: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to a denial of service due to uncontrolled heap allocation.
CVE-2026-15064 - CVSS 8.7 (high), 2026-07-28: IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty is vulnerable to HTTP Response Smuggling due to improper handling of…
CVE-2026-15280 - CVSS 7.5 (high), 2026-07-28: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 ND Collective Controller is affected by a path-segment injection vulnerability in the…
CVE-2026-15325 - CVSS 8.7 (high), 2026-07-28: IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty is vulnerable to HTTP request smuggling due to improper handling of TRACE…
CVE-2026-15328 - CVSS 8.1 (high), 2026-07-28: IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty is vulnerable to HTTP request smuggling.
CVE-2026-16192 - CVSS 7.1 (high), 2026-07-28: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of service vulnerability when the restConnector-2.0 feature is…
CVE-2026-11546 - CVSS 9.8 (critical), 2026-06-30: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is affected by a server-side request forgery vulnerability with the adminCenter-1.0…
CVE-2026-11714 - CVSS 9.8 (critical), 2026-06-30: IBM WebSphere Application Server Liberty is affected by a server-side request forgery vulnerability with the apiDiscovery-1.0 feature enabled.
CVE-2026-11806 - CVSS 7.5 (high), 2026-06-30: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 is affected by an arbitrary file read vulnerability with the restConnector-2.0 feature…
CVE-2026-9320 - CVSS 7.5 (high), 2026-06-22: IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are vulnerable to a denial of service,…
CVE-2026-9071 - CVSS 7.5 (high), 2026-06-22: IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are vulnerable to a denial of service,…
CVE-2026-8646 - CVSS 9.1 (critical), 2026-06-22: IBM WebSphere Application Server 9.0 and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are vulnerable to HTTP request…
CVE-2026-5516 - CVSS 5.9 (medium), 2026-05-27: IBM WebSphere Application Server - Liberty 22.0.0.11 through 26.0.0.5 IBM WebSphere Application Server Liberty could allow a remote attacker to bypass…
CVE-2026-4410 - CVSS 7.5 (high), 2026-05-27: IBM WebSphere Application Server - Liberty 19.0.0.7 through 26.0.0.5 and IBM WebSphere Application Server 9.0, and 8.5 and WebSphere Application Server…
CVE-2026-3621 - CVSS 7.5 (high), 2026-04-23: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.4 IBM WebSphere Application Server Liberty is vulnerable to identity spoofing under limited…
CVE-2025-14915 - CVSS 7.2 (high), 2026-03-25: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty is affected by privilege escalation. A…
CVE-2025-14917 - CVSS 9.8 (critical), 2026-03-25: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty could provide weaker than expected security when…
CVE-2025-14923 - CVSS 9.8 (critical), 2026-03-03: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.2 IBM WebSphere Application Server Liberty could provide weaker than expected security when…