Description
IBM WebSphere Application Server Liberty 18.0.0.2 through 25.0.0.8 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | WebSphere Application Server Liberty | 18.0.0.2 – ≤ 25.0.0.8 | — |
Advisories 2
- WID-SEC-2025-1833 IBM WebSphere Application Server: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Oct 11, 2026
- WID-SEC-2025-2853 HCL Commerce: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 15, 2025
References
- https://www.ibm.com/support/pages/node/7242086 vendor-advisory patch