DeutschShown in its original language — a full translation is planned for a future version.
IBM WebSphere Application Server: Mehrere Schwachstellen
view advisory published 2026-06-17
Ein Angreifer kann mehrere Schwachstellen in IBM WebSphere Application Server ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, und um seine Privilegien zu erhöhen.
01
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-10852US | high7.5 | — | ||
IBM WebSphere Application Server and IBM WebSphere Application Server Liberty are vulnerable to denial of service in the WebSphere WebServer Plug-in component when an attacker can… | ||||
| CVE-2026-9320US | high7.5 | — | ||
IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are vulnerable to a denial of service, caused by sending a sp… | ||||
| CVE-2026-9072US | critical9.8 | — | ||
IBM WebSphere Application Server and IBM WebSphere Application Server Liberty - when using Intelligent Management with the WebSphere WebServer Plug-in component - are vulnerable to… | ||||
| CVE-2026-9071US | — | — | ||
IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are vulnerable to a denial of service, caused by sending a sp… | ||||
| CVE-2026-9006US | critical9.1 | — | ||
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to server-side request forgery (SSRF) with the Ajax Proxy configured. This may allow an attacker to send unauthorized re… | ||||
| CVE-2026-8858US | high8.8 | — | ||
IBM WebSphere Application Server and IBM WebSphere Application Server Liberty are vulnerable to remote code execution and denial of service in the WebSphere Web Server Plug-in comp… | ||||
| CVE-2026-8646US | critical9.1 | — | ||
IBM WebSphere Application Server 9.0 and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are vulnerable to HTTP request smuggling. A remote attacker co… | ||||
| CVE-2026-10845US | — | — | ||
IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to bypass authentication and gain unauthorized access to JAX-WS applications. | ||||
02
references
External citations — patches, advisories, analysis.
- Open Liberty Security vulnerability (CVE) list vom 2026-07-14external
- HCL Security Bulletin vom 2026-09-29external
- WID-SEC-W-2026-2001 - CSAF Versionself
- WID-SEC-2026-2001 - Portal Versionself
- IBM Security Bulletin vom 2026-06-17external
- IBM Security Bulletin vom 2026-06-17external
- IBM Security Bulletin vom 2026-06-17external
- IBM Security Bulletin 7276831 vom 2026-06-17external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan