DeutschShown in its original language — a full translation is planned for a future version.
IBM WebSphere Application Server und Liberty: Mehrere Schwachstellen
view advisory published 2026-10-13
Ein Angreifer kann mehrere Schwachstellen in IBM WebSphere Application Server und IBM WebSphere Application Server Liberty ausnutzen, um einen Denial of Service Angriff durchzuführen, Daten offenzulegen, Sicherheitsmaßnahmen zu umgehen oder Administratorrechte zu erlangen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-95680US | high8.0 | — | ||
IBM WebSphere Application Server 8.5, and 9.0 could allow an authenticated attacker to bypass authorization leading to administrative impersonation across the cell. | ||||
| CVE-2026-93907US | high8.1 | — | ||
IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass authentication by exploiting a flaw in the CSIv2 inbound propagation handler. | ||||
| CVE-2026-103499US | high7.5 | — | ||
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 Liberty could allow a remote unauthenticated attacker to cau… | ||||
| CVE-2026-17615US | high7.5 | — | ||
A flaw was found in RESTEasy's SourceProvider. This vulnerability allows an unauthenticated attacker to perform an unauthenticated remote file read. By sending a specially crafted… | ||||
02
references
External citations — patches, advisories, analysis.
- WID-SEC-W-2026-3927 - CSAF Versionself
- WID-SEC-2026-3927 - Portal Versionself
- IBM Security Bulletin 7292213 vom 2026-10-13external
- IBM Security Bulletin 7292214 vom 2026-10-13external
- IBM Security Bulletin 7292216 vom 2026-10-13external
- IBM Security Bulletin 7292217 vom 2026-10-13external
- IBM Security Bulletin 7292643 vom 2026-10-15external
- IBM Security Bulletin 7292706 vom 2026-10-15external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan