Medium · 4.3 CVE-2026-11595 EUVD-2026-40398GHSA-4qvc-jg4j-cv44

IBM WebSphere Application Server is affected by a Path Traversal vulnerability

Published Jun 30, 2026 · Updated Jul 1, 2026 · Assigned by ibm

Vendor: IBM Product: WebSphere Application Server

Description

IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to obtain sensitive information from the administrative console's integrated help system.

Affected products

Vendor	Product	Affected	Fixed
IBM	WebSphere Application Server	9.0, 8.5	—

Advisories 1

WID-SEC-2026-2159 IBM WebSphere Application Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 24, 2026

References

https://www.ibm.com/support/pages/node/7278590 vendor-advisory patch