Websphere Extreme Scale (Ibm) - vulnerabilities (CVEs)

23 CVEs, 0 in the last 30 days, 28 known versions, newest CVE from 2026-06-30. Vendor: Ibm.

CVEs of Websphere Extreme Scale

CVE-2026-13759 - CVSS 8.8 (high), 2026-06-30: IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 ships three ObjectInputStream subclasses (WsObjectInputStream, ObjectStreamPool$ReusableInputStream,…
CVE-2026-13772 - CVSS 9.9 (critical), 2026-06-30: IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 's Object Query Language engine resolves attacker-supplied class names via Class.forName() and invokes…
CVE-2026-13773 - CVSS 10 (critical), 2026-06-30: IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 Approximately 50 generated CORBA stub classes in WebSphere eXtreme Scale's ogclient.jar call…
CVE-2026-9002 - CVSS 6.5 (medium), 2026-06-30: IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 could allow an adjacent attacker to cause a denial of service due to improper validation in the XDF…
CVE-2020-4336 - CVSS 5.3 (medium), 2021-01-06: IBM WebSphere eXtreme Scale 8.6.1 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access…
CVE-2019-4109 - CVSS 6.1 (medium), 2019-09-30: IBM WebSphere eXtreme Scale 8.6 Admin Console could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a…
CVE-2019-4106 - CVSS 4.8 (medium), 2019-09-30: IBM WebSphere eXtreme Scale 8.6 Admin Console is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the…
CVE-2019-4115 - CVSS 5.4 (medium), 2019-09-30: IBM WebSphere eXtreme Scale 8.6 Admin API is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web…
CVE-2019-4112 - CVSS 4 (medium), 2019-09-30: IBM WebSphere eXtreme Scale 8.6 Admin Console allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 158105.
CVE-2015-7418 - CVSS 4.4 (medium), 2017-02-08: IBM WebSphere eXtreme Scale and the WebSphere DataPower XC10 Appliance allow some sensitive data to linger in memory instead of being overwritten which could…
CVE-2016-2861 - CVSS 3.7 (low), 2016-07-02: IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3, 7.1.1 before 7.1.1.1, 8.5 before 8.5.0.3, and 8.6 before 8.6.0.8 does not properly encrypt data, which makes…
CVE-2016-0400 - CVSS 6.1 (medium), 2016-07-02: CRLF injection vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3, 7.1.1 before 7.1.1.1, 8.5 before 8.5.0.3, and 8.6 before 8.6.0.8 allows…
CVE-2015-2031 - CVSS 3.5 (low), 2015-10-04: Cross-site scripting (XSS) vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 allows remote authenticated users to…
CVE-2015-2030 - CVSS 5 (medium), 2015-10-04: IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 has an improper account-lockout setting, which makes it easier for remote attackers…
CVE-2015-2029 - CVSS 4.3 (medium), 2015-10-04: Session fixation vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 allows remote attackers to hijack web sessions via…
CVE-2015-2028 - CVSS 4.3 (medium), 2015-10-04: CRLF injection vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 allows remote attackers to inject arbitrary HTTP…
CVE-2015-2027 - CVSS 2.1 (low), 2015-10-04: IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 improperly performs logout actions, which allows remote attackers to bypass intended…
CVE-2015-2026 - CVSS 6 (medium), 2015-10-04: Cross-site request forgery (CSRF) vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 allows remote authenticated users…
CVE-2015-2025 - CVSS 4.3 (medium), 2015-10-04: IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 does not set the secure flag for the session cookie in an https session, which makes…
CVE-2015-4936 - CVSS 5 (medium), 2015-08-03: Unspecified vulnerability in IBM WebSphere eXtreme Scale 8.6 through 8.6.0.8 allows remote attackers to cause a denial of service via unknown vectors.
CVE-2013-5390 - CVSS 3.5 (low), 2013-10-16: Cross-site scripting (XSS) vulnerability in the monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 allows remote authenticated…
CVE-2013-5394 - CVSS 4.9 (medium), 2013-10-16: The monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 allows remote authenticated users to conduct phishing attacks via…
CVE-2013-5393 - CVSS 7.5 (high), 2013-10-16: The monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 does not properly process logoff actions, which has unspecified impact…