ibm websphere extreme scale

Name: ibm websphere extreme scale
Brand: ibm

productUS

cpe:2.3:a:ibm:websphere_extreme_scale:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

2critical2high14medium5low

updated 2026-10-28

vulnerabilities (23)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2016-0400US	medium6.1	2.14% (82nd)	Exploit	no fix	2016-07-02	14 versions
CVE-2026-13773US	critical10.0	6.10% (93rd)	—	no fix	2026-06-30	8.6.1.0 → 8.6.1.6
CVE-2015-2030US	medium5.0	1.40% (72nd)	—	no fix	2015-10-04	3 versions
CVE-2013-5393US	high7.5	1.26% (70th)	—	no fix	2013-10-16	4 versions
CVE-2019-4109US	medium6.1	1.25% (69th)	—	8.6.1.3	2019-09-30	8.6.0 → 8.6.1.3
CVE-2015-4936US	medium5.0	1.24% (69th)	—	no fix	2015-08-03	9 versions
CVE-2015-2025US	medium4.3	1.23% (69th)	—	no fix	2015-10-04	3 versions
CVE-2015-2029US	medium4.3	1.21% (68th)	—	no fix	2015-10-04	3 versions
CVE-2015-2028US	medium4.3	1.21% (68th)	—	no fix	2015-10-04	3 versions
CVE-2016-2861US	low3.7	1.05% (64th)	—	no fix	2016-07-02	15 versions
CVE-2020-4336US	medium5.3	0.98% (62nd)	—	8.6.1.4	2021-01-06	8.6.1.0 → 8.6.1.4
CVE-2015-2031US	low3.5	0.95% (61st)	—	no fix	2015-10-04	3 versions
CVE-2013-5394US	medium4.9	0.95% (61st)	—	no fix	2013-10-16	4 versions
CVE-2013-5390US	low3.5	0.94% (61st)	—	no fix	2013-10-16	4 versions
CVE-2019-4115US	medium5.4	0.67% (52nd)	—	8.6.1.3	2019-09-30	8.6.0 → 8.6.1.3
CVE-2019-4106US	medium4.8	0.66% (52nd)	—	8.6.1.3	2019-09-30	8.6.0 → 8.6.1.3
CVE-2026-13759US	high8.8	0.55% (46th)	—	no fix	2026-06-30	8.6.1.0 → 8.6.1.6
CVE-2015-2026US	medium6.0	0.54% (45th)	—	no fix	2015-10-04	3 versions
CVE-2026-13772US	critical9.9	0.51% (43rd)	—	no fix	2026-06-30	8.6.1.0 → 8.6.1.6
CVE-2015-2027US	low2.1	0.50% (43rd)	—	no fix	2015-10-04	3 versions
CVE-2015-7418US	medium4.4	0.35% (29th)	—	no fix	2017-02-08	4 versions
CVE-2019-4112US	low3.3	0.34% (27th)	—	8.6.1.3	2019-09-30	8.6.0 → 8.6.1.3
CVE-2026-9002US	medium6.5	0.27% (19th)	—	no fix	2026-06-30	8.6.1.0 → 8.6.1.6

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-200Exposure of Sensitive Information to an Unauthorized Actor4 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4 CVEs
CWE-113Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')2 CVEs
CWE-384Session Fixation2 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-1021Improper Restriction of Rendered UI Layers or Frames1 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-264CWE-2641 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE23 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan