Skip to content
OpenAdvisories
Medium WID-SEC-2026-3758 5 CVEs

IBM WebSphere Application Server Liberty: Mehrere Schwachstellen

Published Oct 6, 2026 · Updated Nov 1, 2026 · Revision 4 · de-DE

Vendor: IBM Product: License Metric Tool Product: TXSeries Product: WebSphere Application Server - Liberty Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM WebSphere Application Server Liberty ausnutzen, um Informationen offenzulegen, um Dateien zu manipulieren und um seine Privilegien zu erhöhen.

Product

IBM WebSphere Application Server Liberty ist ein leichter, dynamischer Anwendungsserver zur Entwicklung und Bereitstellung von Java-Anwendungen und Microservices.

Vulnerabilities 5

  • Medium 6.5
    CVE-2026-14909

    IBM WebSphere Application Server Liberty Information Disclosure

    IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by an information disclosure vulnerability that allows an authenticated attacker to obtain sensitive information when restConnector-2.0 is enbabled.

    IBM WebSphere Application Server - Liberty
  • Medium 6.5
    CVE-2026-77816

    IBM WebSphere Application Server Liberty Improper Certificate Validation

    IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 administrative client could allow man-in-the-middle attacks. An attacker could exploit this vulnerability to obtain sensitive information.

    IBM WebSphere Application Server - Liberty
  • Medium 5.5
    CVE-2026-79715

    IBM WebSphere Application Server Liberty Path Traversal

    IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a local attacker to traverse directories on the system. An attacker could use a specially crafted application archive to write files outside the intended directory.

    IBM WebSphere Application Server - Liberty
  • Medium 5.4
    CVE-2026-11713

    IBM WebSphere Application Server Liberty Incorrect Authorization

    IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by a privilege escalation vulnerability with the restConnector-2.0 feature enabled.

    IBM WebSphere Application Server - Liberty
  • Medium 4.3
    CVE-2026-14532

    IBM WebSphere Application Server Liberty Integer Overflow

    IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a Reader-role attacker to obtain version information that causes an uncaught exception.

    IBM WebSphere Application Server - Liberty

Revision history

  1. #4

    Neue Updates von IBM aufgenommen

  2. #3

    Neue Updates von IBM aufgenommen

  3. #2

    Referenz(en) aufgenommen: EUVD-2026-100491, EUVD-2026-100490, EUVD-2026-100488, EUVD-2026-100487, EUVD-2026-100489

  4. #1

    Initiale Fassung

References