Skip to content
OpenAdvisories
High WID-SEC-2026-2001 8 CVEs

IBM WebSphere Application Server: Mehrere Schwachstellen

Published Jun 17, 2026 · Updated Sep 28, 2026 · Revision 18 · de-DE

Vendor: HCL Software Vendor: IBM Vendor: Red Hat Product: BigFix Product: Business Automation Workflow Product: DevOps Code ClearCase Product: i Product: License Metric Tool Product: MQ Product: Open Liberty Product: Rational ClearCase Product: Rational ClearQuest Product: SPSS Product: Tivoli Monitoring Product: Tivoli Network Manager Product: TXSeries Product: WebSphere Application Server Product: WebSphere Application Server - Liberty Product: WebSphere Service Registry and Repository Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM WebSphere Application Server ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, und um seine Privilegien zu erhöhen.

Product

IBM WebSphere Application Server ist ein J2EE-Applikationsserver.

Vulnerabilities 8

  • High 8.1
    CVE-2026-9072

    WebSphere Application Server Remote Code Execution

    IBM WebSphere Application Server and IBM WebSphere Application Server Liberty - when using Intelligent Management with the WebSphere WebServer Plug-in component - are vulnerable to remote code execution and denial of service. This vulnerability can be exploit…

    IBM WebSphere Application Server
  • High 7.5
    CVE-2026-8858

    WebSphere Application Server Remote Code Execution

    IBM WebSphere Application Server and IBM WebSphere Application Server Liberty are vulnerable to remote code execution and denial of service in the WebSphere Web Server Plug-in component. This vulnerability can be exploited when an attacker impersonates the ap…

    IBM WebSphere Application Server
  • High 7.5
    CVE-2026-9071

    IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by Uncontrolled Resource Consumption

    IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to …

    IBM WebSphere Application Server WebSphere Application Server - Liberty
  • High 7.4
    CVE-2026-8646

    IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities

    IBM WebSphere Application Server 9.0 and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are vulnerable to HTTP request smuggling. A remote attacker could smuggle a specially crafted request to the application server thereby allow…

    IBM WebSphere Application Server WebSphere Application Server - Liberty
  • High 7.4
    CVE-2026-9006

    IBM WebSphere Application Server is affected by server-side request forgery

    IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to server-side request forgery (SSRF) with the Ajax Proxy configured. This may allow an attacker to send unauthorized requests from the system, resulting in a security bypass or information disclosur…

    IBM WebSphere Application Server
  • High 7.3
    CVE-2026-10845

    IBM WebSphere Application Server is affected by an authentication bypass vulnerability

    IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to bypass authentication and gain unauthorized access to JAX-WS applications.

    IBM WebSphere Application Server
  • Medium 5.9
    CVE-2026-10852

    Websphere Application Server is Affected By a Denial of Service

    IBM WebSphere Application Server and IBM WebSphere Application Server Liberty are vulnerable to denial of service in the WebSphere WebServer Plug-in component when an attacker can pass crafted requests to the web server.

    IBM WebSphere Application Server
  • Medium 5.9
    CVE-2026-9320

    IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities

    IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to …

    IBM WebSphere Application Server WebSphere Application Server - Liberty

Revision history

  1. #18

    Neue Updates aufgenommen

  2. #17

    Neue Updates von IBM aufgenommen

  3. #16

    Neue Updates von IBM aufgenommen

  4. #15

    Neue Updates von IBM aufgenommen

  5. #14

    Neue Updates von IBM aufgenommen

  6. #13

    Neue Updates von IBM aufgenommen

  7. #12

    Neue Updates von IBM aufgenommen

  8. #11

    Neue Updates von IBM aufgenommen

  9. #10

    Neue Updates von IBM aufgenommen

  10. #9

    Neue Updates von IBM aufgenommen

  11. #8

    Neue Updates aufgenommen

  12. #7

    Neue Updates von IBM aufgenommen

  13. #6

    Neue Updates von IBM aufgenommen

  14. #5

    Neue Updates von IBM aufgenommen

  15. #4

    Ebenfalls betroffenen Websphere Application Server Liberty aufgenommen

  16. #3

    Referenz(en) aufgenommen: EUVD-2026-38253, EUVD-2026-38252, EUVD-2026-38251, EUVD-2026-38288, EUVD-2026-38286, EUVD-2026-38284, EUVD-2026-38254, EUVD-2026-38346

  17. #2

    Neue Updates von IBM aufgenommen

  18. #1

    Initiale Fassung

References