Skip to content
OpenAdvisories
Medium WID-SEC-2026-0845 4 CVEs

IBM WebSphere Application Server Liberty: Mehrere Schwachstellen

Published Mar 24, 2026 · Updated Sep 28, 2026 · Revision 9 · de-DE

Vendor: HCL Software Vendor: IBM Product: AppScan Enterprise Product: BigFix Product: DataPower Gateway Product: i Product: InfoSphere Information Server Product: MQ Product: Operational Decision Manager Product: TXSeries Product: WebSphere Application Server Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in IBM WebSphere Application Server Liberty ausnutzen, um seine Privilegien zu erhöhen, Sicherheitsmaßnahmen zu umgehen und Informationen offenzulegen.

Product

IBM WebSphere Application Server ist ein J2EE-Applikationsserver.

Vulnerabilities 4

  • High 8.7
    CVE-2026-29063

    Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable

    Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution is possible in immutable via the mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject() APIs. This issue has been pa…

    immutable-js immutable-js katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Wolfi npm
  • Medium 6.7
    CVE-2025-14917

    IBM WebSphere Application Server Liberty could provide weaker than expected security

    IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty could provide weaker than expected security when administering security settings.

    IBM WebSphere Application Server - Liberty
  • Medium 6.5
    CVE-2025-14915

    IBM WebSphere Application Server Liberty is affected by a privilege escalation vulnerability

    IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty is affected by privilege escalation. A privileged user could gain additional access to the application server.

    IBM WebSphere Application Server - Liberty
  • Medium 5.4
    CVE-2026-1561

    IBM WebSphere Application Server Liberty Server-Side Request Forgery

    IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty is vulnerable to server-side request forgery (SSRF). This may allow remote attacker to send unauthorized requests from the system, potentially leadin…

    IBM WebSphere Application Server - Liberty

Revision history

  1. #9

    Neue Updates aufgenommen

  2. #8

    Neue Updates aufgenommen

  3. #7

    Neue Updates von IBM aufgenommen

  4. #6

    Neue Updates von IBM aufgenommen

  5. #5

    Neue Updates von IBM aufgenommen

  6. #4

    Neue Updates von IBM aufgenommen

  7. #3

    Neue Updates von IBM aufgenommen

  8. #2

    Referenz(en) aufgenommen: EUVD-2025-209020, EUVD-2026-15982, EUVD-2025-209021

  9. #1

    Initiale Fassung

References