IBM WebSphere Application Server

CVE-2026-11712 Critical 9.3 IBM WebSphere Application Server is affected by a cross-site scripting vulnerability 0.4%
CVE-2026-10852 Medium 5.9 Websphere Application Server is Affected By a Denial of Service 0.5%
CVE-2026-9320 Medium 5.9 IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities 0.6%
CVE-2026-9071 High 7.5 IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by Uncontrolled Resource Consumption 0.6%
CVE-2026-9006 High 7.4 IBM WebSphere Application Server is affected by server-side request forgery 0.4%
CVE-2026-8646 High 7.4 IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities 0.6%
CVE-2026-10845 High 7.3 IBM WebSphere Application Server is affected by an authentication bypass vulnerability 0.5%
CVE-2026-9072 High 8.1 WebSphere Application Server Remote Code Execution 0.7%
CVE-2026-8858 High 7.5 WebSphere Application Server Remote Code Execution 0.4%
CVE-2026-9330 High 8.5 IBM WebSphere Application Server is affected by remote code execution 0.5%
CVE-2026-9319 Critical 9.0 IBM WebSphere Application Server is affected by a remote code execution vulnerability 0.5%
CVE-2026-9311 Critical 9.0 IBM WebSphere Application Server is affected by remote code execution 0.5%
CVE-2026-8644 Critical 9.1 IBM WebSphere Application Server is affected by an identity spoofing vulnerability 0.3%
CVE-2026-4410 Medium 4.8 IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service 0.5%
CVE-2025-13333 Medium 4.4 IBM WebSphere Application Server could provide weaker than expected security 0.4%
CVE-2025-12635 Medium 5.4 IBM WebSphere Application Server and WebSphere Application Server Liberty Cross-Site Scripting 0.2%
CVE-2025-36099 Medium 4.9 IBM WebSphere Application Server denial of service 0.3%
CVE-2025-33142 Medium 5.3 IBM WebSphere Application Server information disclosure 0.3%
CVE-2024-56339 Low 3.7 IBM WebSphere Application Server information disclosure 0.5%
CVE-2025-36097 High 7.5 IBM WebSphere Application Server denial of service 0.5%
CVE-2025-36038 Critical 9.0 IBM WebSphere Application Server code execution 13.3%
CVE-2025-33104 Medium 4.4 IBM WebSphere Application Server cross 0.2%
CVE-2025-27907 Medium 4.1 IBM WebSphere Application Server server-side request forgery 0.4%
CVE-2024-45087 Medium 4.8 IBM WebSphere Application Server cross-site scripting 0.2%
CVE-2024-45086 Medium 5.5 IBM WebSphere Application Server XML external entity injection 0.4%
CVE-2024-45071 Medium 5.5 IBM WebSphere Application Server cross-site scripting 0.2%
CVE-2024-45072 Medium 5.5 IBM WebSphere Application Server XML external entity injection 0.4%
CVE-2024-45085 Medium 5.9 IBM WebSphere Application Server denial of service 0.6%
CVE-2024-45073 Medium 4.8 IBM WebSphere Application Server cross-site scripting 0.2%
CVE-2023-50315 Medium 5.3 IBM WebSphere Application Server information disclosure 0.3%
CVE-2024-35154 High 7.2 IBM WebSphere Application Server code execution 1.2%
CVE-2024-35153 Medium 4.8 IBM WebSphere Application Server cross-site scripting 0.4%
CVE-2024-37532 High 8.8 IBM WebSphere Application Server identity spoofing 0.4%
CVE-2024-25026 Medium 5.9 IBM WebSphere Application Server denial of service 0.8%
CVE-2024-22329 Medium 4.3 IBM WebSphere Application Server server-side request forgery 0.3%
CVE-2024-22354 High 7.0 IBM WebSphere Application Server XML external entity injection 0.6%
CVE-2023-50313 Medium 5.3 IBM WebSphere Application Server information disclosure 0.2%
CVE-2023-35890 Medium 5.1 IBM WebSphere Application Server information disclosure 0.1%
CVE-2023-27554 Medium 6.3 IBM WebSphere Application Server XML external entity injection 0.9%
CVE-2022-39161 Medium 4.8 IBM WebSphere Application Server information disclosure 0.4%
CVE-2023-24966 Medium 6.1 IBM WebSphere Application Server cross-site scripting 0.4%
CVE-2023-26283 Medium 5.4 IBM WebSphere Application Server cross-site scripting 0.4%
CVE-2023-23477 High 8.1 IBM WebSphere Application Server code execution 1.9%
CVE-2022-43917 Medium 5.9 IBM WebSphere Application Server information disclosure 0.5%
CVE-2022-40750 Medium 5.4 IBM WebSphere Application Server cross-site scripting 0.4%
CVE-2022-35282 Medium 4.3 IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to server-side request forgery (SSRF). By sending a specially crafted request, an attacker with local network access could exploit 0.3%
CVE-2022-34336 Medium 5.4 IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intend 0.5%
CVE-2022-34165 Medium 5.4 IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.9 are vulnerable to HTTP header injection, caused by improper validation. T 0.6%
CVE-2022-22477 Medium 6.1 IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended function 0.6%
CVE-2022-22473 Low 3.7 IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to obtain sensitive information caused by improper handling of Administrative Console data. This information could 1.1%