WA
Product
WebSphere Application Server - Liberty
52
CVEs
0
On KEV
9.8
Max CVSS
14
New 30D
Severity mix
Critical 13High 23Medium 16Low 0
Watch
Add WebSphere Application Server - Liberty to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-8400 | 9.8 | Aug 5 | Multiple Vulnerabilities in IBM® Java SDK affect IBM WebSphere Application Server and WebSphere Application Server Liberty due to the July 2026 CPU Affected: Continuous delivery |
| CVE-2026-14529 | 9.8 | Jul 29 | IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a server-side request forgery Affected: 17.0.0.3 through 26.0.0.8 |
| CVE-2026-14976 | 9.8 | Jul 28 | IBM WebSphere Application Server Liberty is affected by a remote code execution and path-segment injection vulnerability Affected: 17.0.0.3 through 26.0.0.8 |
| CVE-2026-11546 | 9.8 | Jun 30 | IBM WebSphere Application Server Liberty is affected by a server-side request forgery vulnerability Affected: 17.0.0.3 through 26.0.0.7 |
| CVE-2026-11714 | 9.8 | Jun 30 | IBM WebSphere Application Server Liberty is affected by an authorization bypass vulnerability Affected: 17.0.0.3 through 26.0.0.7 |
| CVE-2025-14917 | 9.8 | Mar 25 | IBM WebSphere Application Server Liberty could provide weaker than expected security Affected: 17.0.0.3 through 26.0.0.3 |
| CVE-2025-14923 | 9.8 | Mar 3 | IBM WebSphere Application Server Liberty could provide weaker than expected security Affected: 17.0.0.3 through 26.0.0.2 |
| CVE-2023-46158 | 9.8 | Oct 25 | IBM WebSphere Application Server Liberty 23.0.0.9 through 23.0.0.10 could provide weaker than expected security due to improper resource expiration handling Affected: 23.0.0.9 before 23.0.0.11 |
| CVE-2026-14525 | 9.4 | Aug 13 | IBM WebSphere Application Server Liberty is affected by an authenication bypass Affected: 17.0.0.3 through 26.0.0.8 |
| CVE-2026-93909 | 9.1 | Oct 13 | IBM WebSphere Application Server Liberty is affected by an authentication bypass Affected: 17.0.0.3 through 26.0.0.10 |
| CVE-2026-93895 | 9.1 | Oct 13 | IBM WebSphere Application Server Liberty Improper Access Control Affected: 20.0.0.12 through 26.0.0.10 |
| CVE-2026-95695 | 9.1 | Oct 13 | IBM WebSphere Application Server Liberty Incorrect Authorization Affected: 20.0.0.12 through 26.0.0.10 |
| CVE-2026-8646 | 9.1 | Jun 22 | IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities Affected: 17.0.0.3 through 26.0.0.6 |
Showing 13