IBM WebSphere Application Server und Liberty: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 4

• High 8.1
  CVE-2026-93907

  IBM WebSphere Application Server is affected by a bypass authentication vulnerability

  IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass authentication by exploiting a flaw in the CSIv2 inbound propagation handler.

  IBM WebSphere Application Server
  Oct 13, 2026
• High 8.0
  CVE-2026-95680

  IBM WebSphere Application Server is affected by an authorization bypass

  IBM WebSphere Application Server 8.5, and 9.0 could allow an authenticated attacker to bypass authorization leading to administrative impersonation across the cell.

  IBM WebSphere Application Server
  Oct 13, 2026
• High 7.5
  CVE-2026-103499

  IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service

  IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 Liberty could allow a remote unauthenticated attacker to cause a denial of service due to uncontrolled resource consumption.

  IBM WebSphere Application Server WebSphere Application Server - Liberty
  Oct 13, 2026
• High 7.5
  CVE-2026-17615

  Resteasy-core: resteasy sourceprovider remote unauthenticated file read

  A flaw was found in RESTEasy's SourceProvider. This vulnerability allows an unauthenticated attacker to perform an unauthenticated remote file read. By sending a specially crafted XML body with a DOCTYPE declaration referencing external entities to an endpoin…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Linux Debian Ubuntu
  Aug 31, 2026

Revision history

1. 2026-11-09 #6

   Neue Updates von IBM aufgenommen

2. 2026-11-01 #5

   Neue Updates von IBM aufgenommen

3. 2026-10-29 #4

   Neue Updates von IBM aufgenommen

4. 2026-10-15 #3

   Neue Updates von IBM aufgenommen

5. 2026-10-14 #2

   Neue Updates von IBM aufgenommen

6. 2026-10-13 #1

   Initiale Fassung

References

• IBM Security Bulletin 7292213 vom 2026-10-13
  https://www.ibm.com/support/pages/node/7292213
• IBM Security Bulletin 7292214 vom 2026-10-13
  https://www.ibm.com/support/pages/node/7292214
• IBM Security Bulletin 7292216 vom 2026-10-13
  https://www.ibm.com/support/pages/node/7292216
• IBM Security Bulletin 7292217 vom 2026-10-13
  https://www.ibm.com/support/pages/node/7292217
• IBM Security Bulletin 7292643 vom 2026-10-15
  https://www.ibm.com/support/pages/node/7292643
• IBM Security Bulletin 7292706 vom 2026-10-15
  https://www.ibm.com/support/pages/node/7292706
• IBM Security Bulletin 7294661 vom 2026-10-30
  https://www.ibm.com/support/pages/node/7294661
• IBM Security Bulletin 7294693 vom 2026-10-29
  https://www.ibm.com/support/pages/node/7294693
• IBM Security Bulletin 7295112 vom 2026-11-02
  https://www.ibm.com/support/pages/node/7295112
• IBM Security Bulletin 7296060 vom 2026-11-09
  https://www.ibm.com/support/pages/node/7296060