WA
Product
WebSphere Application Server - Liberty
52
CVEs
0
On KEV
9.8
Max CVSS
14
New 30D
Severity mix
Critical 13High 23Medium 16Low 0
Watch
Add WebSphere Application Server - Liberty to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-14980 | 8.8 | Jul 30 | IBM WebSphere Application Server Liberty is affected by a cross-site request forgery Affected: 17.0.0.3 through 26.0.0.8 |
| CVE-2026-2482 | 8.8 | Jul 29 | IBM WebSphere Application Server Liberty is affected by a cross-site request forgery Affected: 17.0.0.3 through 26.0.0.8 |
| CVE-2026-101294 | 8.7 | Oct 13 | IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a missing cryptographic step Affected: 17.0.0.3 through 26.0.0.10 |
| CVE-2026-15064 | 8.7 | Jul 28 | IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities Affected: 17.0.0.3 through 26.0.0.7 |
| CVE-2026-15325 | 8.7 | Jul 28 | IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities Affected: 17.0.0.3 through 26.0.0.7 |
| CVE-2026-93905 | 8.2 | Oct 13 | IBM WebSphere Application Server Liberty is affected by a deserialization of untrusted data Affected: 17.0.0.3 through 26.0.0.10 |
| CVE-2026-105443 | 8.2 | Oct 13 | IBM WebSphere Application Server Liberty is affected by an improper access control Affected: 17.0.0.3 through 26.0.0.10 |
| CVE-2026-18499 | 8.1 | Aug 12 | IBM WebSphere Application Server Liberty is affected by a privilege escalation Affected: 17.0.0.3 through 26.0.0.8 |
| CVE-2026-15328 | 8.1 | Jul 28 | IBM WebSphere Application Server and WebSphere Application Server Liberty is inconsistent Interpretation of HTTP Requests Affected: 17.0.0.3 through 26.0.0.7 |
| CVE-2026-95696 | 7.5 | Oct 13 | IBM WebSphere Application Server Liberty Denial of Service Affected: 20.0.0.12 through 26.0.0.10 |
| CVE-2026-105442 | 7.5 | Oct 13 | IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a deserialization of untrusted data Affected: 17.0.0.3 through 26.0.0.10 |
| CVE-2026-103499 | 7.5 | Oct 13 | IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service Affected: 17.0.0.3 through 26.0.0.10 |
| CVE-2026-9322 | 7.5 | Jul 30 | IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities Affected: 17.0.0.3 through 26.0.0.7 |
| CVE-2026-10842 | 7.5 | Jul 30 | IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a security bypass vulnerability Affected: 17.0.0.3 through 26.0.0.7 |
| CVE-2026-11897 | 7.5 | Jul 30 | IBM WebSphere Application Server Liberty is affected by a denial of service vulnerability with HTTP/2 Affected: 17.0.0.3 through 26.0.0.7 |
| CVE-2026-14981 | 7.5 | Jul 28 | IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities Affected: 17.0.0.3 through 26.0.0.7 |
| CVE-2026-15057 | 7.5 | Jul 28 | IBM WebSphere Application Server Liberty is affected by a denial of service vulnerability Affected: 17.0.0.3 through 26.0.0.7 |
| CVE-2026-15280 | 7.5 | Jul 28 | IBM WebSphere Application Server Liberty is affected by a remote code execution and path-segment injection vulnerability Affected: 17.0.0.3 through 26.0.0.8 |
| CVE-2026-11806 | 7.5 | Jun 30 | IBM WebSphere Application Server Liberty is affected by a an arbitrary file read vulnerability Affected: 17.0.0.3 through 26.0.0.6 |
| CVE-2026-9320 | 7.5 | Jun 22 | IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities Affected: 17.0.0.3 through 26.0.0.6 |
| CVE-2026-9071 | 7.5 | Jun 22 | IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by Uncontrolled Resource Consumption Affected: 17.0.0.3 through 26.0.0.6 |
| CVE-2026-4410 | 7.5 | May 27 | IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service Affected: 19.0.0.7 through 26.0.0.5 |
| CVE-2025-14915 | 7.2 | Mar 25 | IBM WebSphere Application Server Liberty is affected by a privilege escalation vulnerability Affected: 17.0.0.3 through 26.0.0.3 |
Showing 23