Login Request a demo
WA
Product
WebSphere Application Server - Liberty
by IBM · last CVE Oct 13, 2026
52
CVEs
0
On KEV
9.8
Max CVSS
14
New 30D
Vulnerabilities52In the news0Timeline
Severity mix
Critical 13High 23Medium 16Low 0
Severity
All severities52Critical13High23Medium16Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add WebSphere Application Server - Liberty to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-8400
9.8
0%
Aug 5
Multiple Vulnerabilities in IBM® Java SDK affect IBM WebSphere Application Server and WebSphere Application Server Liberty due to the July 2026 CPU
Affected: Continuous delivery
CVE-2026-14529
9.8
1%
Jul 29
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a server-side request forgery
Affected: 17.0.0.3 through 26.0.0.8
CVE-2026-14976
9.8
1%
Jul 28
IBM WebSphere Application Server Liberty is affected by a remote code execution and path-segment injection vulnerability
Affected: 17.0.0.3 through 26.0.0.8
CVE-2026-11546
9.8
0%
Jun 30
IBM WebSphere Application Server Liberty is affected by a server-side request forgery vulnerability
Affected: 17.0.0.3 through 26.0.0.7
CVE-2026-11714
9.8
0%
Jun 30
IBM WebSphere Application Server Liberty is affected by an authorization bypass vulnerability
Affected: 17.0.0.3 through 26.0.0.7
CVE-2025-14917
9.8
0%
Mar 25
IBM WebSphere Application Server Liberty could provide weaker than expected security
Affected: 17.0.0.3 through 26.0.0.3
CVE-2025-14923
9.8
0%
Mar 3
IBM WebSphere Application Server Liberty could provide weaker than expected security
Affected: 17.0.0.3 through 26.0.0.2
CVE-2023-46158
9.8
1%
Oct 25
IBM WebSphere Application Server Liberty 23.0.0.9 through 23.0.0.10 could provide weaker than expected security due to improper resource expiration handling
Affected: 23.0.0.9 before 23.0.0.11
CVE-2026-14525
9.4
1%
Aug 13
IBM WebSphere Application Server Liberty is affected by an authenication bypass
Affected: 17.0.0.3 through 26.0.0.8
CVE-2026-93909
9.1
0%
Oct 13
IBM WebSphere Application Server Liberty is affected by an authentication bypass
Affected: 17.0.0.3 through 26.0.0.10
CVE-2026-93895
9.1
0%
Oct 13
IBM WebSphere Application Server Liberty Improper Access Control
Affected: 20.0.0.12 through 26.0.0.10
CVE-2026-95695
9.1
0%
Oct 13
IBM WebSphere Application Server Liberty Incorrect Authorization
Affected: 20.0.0.12 through 26.0.0.10
CVE-2026-8646
9.1
1%
Jun 22
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities
Affected: 17.0.0.3 through 26.0.0.6
CVE-2026-14980
8.8
0%
Jul 30
IBM WebSphere Application Server Liberty is affected by a cross-site request forgery
Affected: 17.0.0.3 through 26.0.0.8
CVE-2026-2482
8.8
0%
Jul 29
IBM WebSphere Application Server Liberty is affected by a cross-site request forgery
Affected: 17.0.0.3 through 26.0.0.8
CVE-2026-101294
8.7
0%
Oct 13
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a missing cryptographic step
Affected: 17.0.0.3 through 26.0.0.10
CVE-2026-15064
8.7
0%
Jul 28
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities
Affected: 17.0.0.3 through 26.0.0.7
CVE-2026-15325
8.7
0%
Jul 28
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities
Affected: 17.0.0.3 through 26.0.0.7
CVE-2026-93905
8.2
0%
Oct 13
IBM WebSphere Application Server Liberty is affected by a deserialization of untrusted data
Affected: 17.0.0.3 through 26.0.0.10
CVE-2026-105443
8.2
0%
Oct 13
IBM WebSphere Application Server Liberty is affected by an improper access control
Affected: 17.0.0.3 through 26.0.0.10
CVE-2026-18499
8.1
0%
Aug 12
IBM WebSphere Application Server Liberty is affected by a privilege escalation
Affected: 17.0.0.3 through 26.0.0.8
CVE-2026-15328
8.1
0%
Jul 28
IBM WebSphere Application Server and WebSphere Application Server Liberty is inconsistent Interpretation of HTTP Requests
Affected: 17.0.0.3 through 26.0.0.7
CVE-2026-95696
7.5
0%
Oct 13
IBM WebSphere Application Server Liberty Denial of Service
Affected: 20.0.0.12 through 26.0.0.10
CVE-2026-105442
7.5
0%
Oct 13
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a deserialization of untrusted data
Affected: 17.0.0.3 through 26.0.0.10
CVE-2026-103499
7.5
0%
Oct 13
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service
Affected: 17.0.0.3 through 26.0.0.10
CVE-2026-9322
7.5
1%
Jul 30
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities
Affected: 17.0.0.3 through 26.0.0.7
CVE-2026-10842
7.5
1%
Jul 30
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a security bypass vulnerability
Affected: 17.0.0.3 through 26.0.0.7
CVE-2026-11897
7.5
1%
Jul 30
IBM WebSphere Application Server Liberty is affected by a denial of service vulnerability with HTTP/2
Affected: 17.0.0.3 through 26.0.0.7
CVE-2026-14981
7.5
0%
Jul 28
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities
Affected: 17.0.0.3 through 26.0.0.7
CVE-2026-15057
7.5
0%
Jul 28
IBM WebSphere Application Server Liberty is affected by a denial of service vulnerability
Affected: 17.0.0.3 through 26.0.0.7
CVE-2026-15280
7.5
1%
Jul 28
IBM WebSphere Application Server Liberty is affected by a remote code execution and path-segment injection vulnerability
Affected: 17.0.0.3 through 26.0.0.8
CVE-2026-11806
7.5
0%
Jun 30
IBM WebSphere Application Server Liberty is affected by a an arbitrary file read vulnerability
Affected: 17.0.0.3 through 26.0.0.6
CVE-2026-9320
7.5
1%
Jun 22
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities
Affected: 17.0.0.3 through 26.0.0.6
CVE-2026-9071
7.5
1%
Jun 22
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by Uncontrolled Resource Consumption
Affected: 17.0.0.3 through 26.0.0.6
CVE-2026-4410
7.5
0%
May 27
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service
Affected: 19.0.0.7 through 26.0.0.5
CVE-2025-14915
7.2
1%
Mar 25
IBM WebSphere Application Server Liberty is affected by a privilege escalation vulnerability
Affected: 17.0.0.3 through 26.0.0.3
CVE-2026-14909
6.5
0%
Oct 13
IBM WebSphere Application Server Liberty Information Disclosure
Affected: 17.0.0.3 through 26.0.0.9
CVE-2026-77816
6.5
0%
Oct 13
IBM WebSphere Application Server Liberty Improper Certificate Validation
Affected: 17.0.0.3 through 26.0.0.9
CVE-2026-11549
6.5
0%
Sep 18
IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty Improper Access Control
Affected: 17.0.0.3 through 26.0.0.5
CVE-2026-15396
6.5
0%
Sep 14
IBM WebSphere Application Server IBM WebSphere Application Server - Liberty HTTP Request Smuggling
Affected: 17.0.0.3 through 26.0.0.5
CVE-2026-15412
6.5
0%
Sep 14
IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty Open Redirect
Affected: 17.0.0.3 through 26.0.0.5
CVE-2026-15634
6.5
0%
Sep 14
IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty Request Smuggling
Affected: 17.0.0.3 through 26.0.0.5
CVE-2026-16192
6.5
0%
Jul 28
IBM WebSphere Application Server Liberty is affected by a denial of service
Affected: 17.0.0.3 through 26.0.0.8
CVE-2026-5516
5.9
0%
May 27
IBM WebSphere Application Server Liberty is affected by a security bypass vulnerability
Affected: 22.0.0.11 through 26.0.0.5
CVE-2026-3621
5.9
0%
Apr 22
IBM WebSphere Application Server Liberty is affected by identity spoofing
Affected: 17.0.0.3 through 26.0.0.4
CVE-2026-79715
5.5
0%
Oct 13
IBM WebSphere Application Server Liberty Path Traversal
Affected: 17.0.0.3 through 26.0.0.9
CVE-2026-11713
5.4
0%
Oct 13
IBM WebSphere Application Server Liberty Incorrect Authorization
Affected: 17.0.0.3 through 26.0.0.9
CVE-2026-10571
5.3
1%
Aug 13
IBM WebSphere Application Server Liberty is affected by a denial of service
Affected: 17.0.0.3 through 26.0.0.8
CVE-2026-11722
4.8
0%
Sep 18
IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty HTTP Request Smuggling
Affected: 17.0.0.3 through 26.0.0.5
CVE-2026-11548
4.8
0%
Sep 18
IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty HTTP Request Smuggling
Affected: 17.0.0.3 through 26.0.0.5
Page 1 of 2 · 52 total
12