Skip to content
OpenAdvisories
High WID-SEC-2026-1683 2 CVEs

IBM WebSphere Application Server: Mehrere Schwachstellen

Published May 26, 2026 · Updated Jul 21, 2026 · Revision 6 · de-DE

Vendor: IBM Product: Business Automation Workflow Product: Maximo Asset Management Product: Rational ClearQuest Product: Tivoli Monitoring Product: WebSphere Application Server Product: WebSphere Service Registry and Repository Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM WebSphere Application Server ausnutzen, um Sicherheitsvorkehrungen zu umgehen und um beliebigen Programmcode auszuführen.

Product

IBM WebSphere Application Server ist ein J2EE-Applikationsserver.

Vulnerabilities 2

  • Critical 9.8
    CVE-2026-8633

    IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities when using when using Web Server Plug-ins

    IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to remote code execution in the Web Server Plug-ins, through a specially crafted r…

    IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty
  • High 7.5
    CVE-2026-8620

    IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities when using when using Web Server Plug-ins

    IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to HTTP request smuggling in the Web Server Plug-ins through a specially crafted r…

    IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty

Revision history

  1. #6

    Neue Updates von IBM aufgenommen

  2. #5

    Neue Updates von IBM aufgenommen

  3. #4

    Neue Updates von IBM aufgenommen

  4. #3

    Neue Updates von IBM aufgenommen

  5. #2

    Neue Updates von IBM aufgenommen

  6. #1

    Initiale Fassung

References