Skip to content
OpenAdvisories
Medium WID-SEC-2026-1593 2 CVEs

IBM WebSphere Application Server: Mehrere Schwachstellen

Published May 19, 2026 · Updated Sep 15, 2026 · Revision 7 · de-DE

Vendor: IBM Product: i Product: MQ Product: Tivoli Monitoring Product: TXSeries Product: WebSphere Application Server Platform: Linux Platform: macOS Platform: Windows

Summary

Ein Angreifer aus einem angrenzenden Netzwerk kann mehrere Schwachstellen in IBM WebSphere Application Server ausnutzen, um einen Denial of Service Angriff durchzuführen oder Informationen offenzulegen.

Product

IBM WebSphere Application Server ist ein J2EE-Applikationsserver.

Vulnerabilities 2

  • Medium 4.8
    CVE-2026-4410

    IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service

    IBM WebSphere Application Server - Liberty 19.0.0.7 through 26.0.0.5 and IBM WebSphere Application Server 9.0, and 8.5 and WebSphere Application Server Liberty are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote atta…

    IBM WebSphere Application Server WebSphere Application Server - Liberty
  • Medium 4.4
    CVE-2026-5516

    IBM WebSphere Application Server Liberty is affected by a security bypass vulnerability

    IBM WebSphere Application Server - Liberty 22.0.0.11 through 26.0.0.5 IBM WebSphere Application Server Liberty could allow a remote attacker to bypass security under limited conditions by exploiting a specific timing window.

    IBM WebSphere Application Server - Liberty

Revision history

  1. #7

    Neue Updates von IBM aufgenommen

  2. #6

    Neue Updates von IBM aufgenommen

  3. #5

    Neue Updates von IBM aufgenommen

  4. #4

    Neue Updates von IBM aufgenommen

  5. #3

    Neue Updates von IBM aufgenommen

  6. #2

    Referenz(en) aufgenommen: EUVD-2026-32487, EUVD-2026-32281

  7. #1

    Initiale Fassung

References