DeutschShown in its original language — a full translation is planned for a future version.
IBM WebSphere Application Server Liberty: Mehrere Schwachstellen
view advisory published 2026-03-24
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in IBM WebSphere Application Server Liberty ausnutzen, um seine Privilegien zu erhöhen, Sicherheitsmaßnahmen zu umgehen und Informationen offenzulegen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-1561US | medium5.4 | — | ||
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty is vulnerable to server-side request forgery (SSRF). This may allow re… | ||||
| CVE-2025-14917US | critical9.8OT elevated | — | ||
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty could provide weaker than expected security when administering securit… | ||||
| CVE-2025-14915US | high7.2 | — | ||
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty is affected by privilege escalation. A privileged user could gain addi… | ||||
| CVE-2026-29063US | critical9.8 | — | ||
Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution is possible in immutable via the mergeDeep(), mergeD… | ||||
02
references
External citations — patches, advisories, analysis.
- HCL Security Bulletin vom 2026-09-29external
- HCL Security Bulletin vom 2026-08-27external
- WID-SEC-W-2026-0845 - CSAF Versionself
- WID-SEC-2026-0845 - Portal Versionself
- IBM Security Bulletin vom 2026-03-24external
- IBM Security Bulletin vom 2026-03-24external
- IBM Security Bulletin vom 2026-03-24external
- IBM Security Bulletin vom 2026-03-24external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan