Skip to content
OpenAdvisories
Medium WID-SEC-2026-2606 3 CVEs

IBM WebSphere Application Server: Mehrere Schwachstellen ermöglichen Denial of Service

Published Jul 30, 2026 · Updated Sep 22, 2026 · Revision 9 · de-DE

Vendor: IBM Product: DevOps Code ClearCase Product: MQ Product: Rational ClearCase Product: Rational ClearQuest Product: SPSS Product: Tivoli Monitoring Product: TXSeries Product: WebSphere Application Server Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM WebSphere Application Server ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

IBM WebSphere Application Server ist ein J2EE-Applikationsserver.

Vulnerabilities 3

  • High 7.5
    CVE-2026-50645

    Apache CXF: No restriction on attachment headers per message

    There is no restriction on the amount of attachment headers that a message can contain when being deserialized by Apache CXF, which can lead to uncontrolled resource consumption or a denial of service attack. Users are recommended to upgrade to versions 4.2.2…

    Apache Software Foundation Apache CXF apache-tika-3.2 apache-tika-3.1 Wolfi Maven
  • High 7.5
    CVE-2026-9171

    Vulnerabilities in IBM WebSphere Application affects IBM PowerVM Novalink.

    IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources.

    IBM PowerVM Novalink
  • High 7.5
    CVE-2026-9322

    IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities

    IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 are vulnerable to a denial of service via a crafted HTTP request.

    IBM WebSphere Application Server WebSphere Application Server - Liberty

Revision history

  1. #9

    Neue Updates von IBM aufgenommen

  2. #8

    Neue Updates von IBM aufgenommen

  3. #7

    Neue Updates von IBM aufgenommen

  4. #6

    Neue Updates von IBM aufgenommen

  5. #5

    Neue Updates von IBM aufgenommen

  6. #4

    Neue Updates von IBM aufgenommen

  7. #3

    Neue Updates von IBM aufgenommen

  8. #2

    Neue Updates von IBM aufgenommen

  9. #1

    Initiale Fassung

References