Critical · 9.3 CVE-2026-11707 EUVD-2026-51141GHSA-wqwm-6mc2-j593

Multiple vulnerabilities have been identified in IBM WebSphere Application Server shipped with Tivoli System Automation Application Manager

Published Jul 30, 2026 · Updated Jul 30, 2026 · Assigned by ibm

Vendor: IBM Product: Tivoli System Automation Application Manager

Description

IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by a cross-site scripting vulnerability in the administrative console login page.

Affected products

Vendor	Product	Affected	Fixed
IBM	Tivoli System Automation Application Manager	4.1	—

Advisories 1

WID-SEC-2026-2050 IBM WebSphere Application Server und Application Server Liberty: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 14, 2026

References

https://www.ibm.com/support/pages/node/7281073 vendor-advisory patch