Critical · 9.3 CVE-2026-11708 EUVD-2026-40397GHSA-6r45-rmg6-v6j9

IBM WebSphere Application Server is affected by a cross-site scripting vulnerability

Published Jun 30, 2026 · Updated Jul 1, 2026 · Assigned by ibm

Vendor: IBM Product: WebSphere Application Server

Description

IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the administrative console's integrated help system.

Affected products

Vendor	Product	Affected	Fixed
IBM	WebSphere Application Server	9.0, 8.5	—

Advisories 1

WID-SEC-2026-2159 IBM WebSphere Application Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 24, 2026

References

https://www.ibm.com/support/pages/node/7278590 vendor-advisory patch