Description
IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to HTTP request smuggling in the Web Server Plug-ins through a specially crafted request.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty | 8.5, 9.0 – ≤ Interim Fix 002 | — |
Advisories 2
- WID-SEC-2026-1683 IBM WebSphere Application Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 21, 2026
- NCSC-2026-0177 Kwetsbaarheden verholpen in IBM WebSphere Application Server en WebSphere Liberty NCSC-NL (Netherlands) · Jun 8, 2026
References
- https://www.ibm.com/support/pages/node/7274072 vendor-advisory patch