IBM WebSphere Application Server - Liberty

CVE-2026-1561 Medium 5.4 IBM WebSphere Application Server Liberty Server-Side Request Forgery 0.3%
CVE-2025-14923 Medium 4.7 IBM WebSphere Application Server Liberty could provide weaker than expected security 0.2%
CVE-2025-14914 High 7.6 IBM WebSphere Application Server Liberty Path Traversal 0.5%
CVE-2025-12635 Medium 5.4 IBM WebSphere Application Server and WebSphere Application Server Liberty Cross-Site Scripting 0.2%
CVE-2025-36047 Medium 5.3 IBM WebSphere Application Server Liberty denial of service 0.5%
CVE-2025-36000 Medium 4.4 IBM WebSphere Application Server Liberty cross-site scripting 0.2%
CVE-2025-36124 Medium 5.9 IBM WebSphere Application Server Liberty bypass security 0.4%
CVE-2024-56339 Low 3.7 IBM WebSphere Application Server information disclosure 0.5%
CVE-2025-36097 High 7.5 IBM WebSphere Application Server denial of service 0.5%
CVE-2024-25026 Medium 5.9 IBM WebSphere Application Server denial of service 0.8%
CVE-2024-22329 Medium 4.3 IBM WebSphere Application Server server-side request forgery 0.3%
CVE-2024-22354 High 7.0 IBM WebSphere Application Server XML external entity injection 0.6%
CVE-2024-27268 Medium 5.9 IBM WebSphere Application Server Liberty denial of service 1.3%
CVE-2024-22353 Medium 5.9 IBM WebSphere Application Server Liberty denial of service 0.8%
CVE-2024-27270 Medium 4.7 IBM WebSphere Application Server Liberty cross-site scripting 0.4%
CVE-2023-50312 Medium 5.3 IBM WebSphere Application Server Liberty information disclosure 0.6%
CVE-2023-46158 Medium 4.9 IBM WebSphere Application Server session fixation 0.5%
CVE-2023-38737 Medium 5.9 IBM WebSphere Application Server Liberty denial of service 1.0%
CVE-2022-34165 Medium 5.4 IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.9 are vulnerable to HTTP header injection, caused by improper validation. T 0.6%
CVE-2022-22476 Medium 5.0 IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.7 and Open Liberty are vulnerable to identity spoofing by an authenticated user using a specially crafted request. IBM X-Force ID: 2256 0.8%
CVE-2022-22475 Medium 5.0 IBM WebSphere Application Server Liberty and Open Liberty 17.0.0.3 through 22.0.0.5 are vulnerable to identity spoofing by an authenticated user. IBM X-Force ID: 225603. 0.6%
CVE-2022-22393 Low 3.1 IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.5 , with the adminCenter-1.0 feature configured, could allow an authenticated user to issue a request to obtain the status of HTTP/HTTP 0.7%
CVE-2021-39038 Medium 4.4 IBM WebSphere Application Server 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.2 could allow a remote attacker to hijack the clicking action of the victim. By persuading a v 0.6%
CVE-2021-39031 High 7.5 IBM WebSphere Application Server - Liberty 17.0.0.3 through 22.0.0.1 could allow a remote authenticated attacker to conduct an LDAP injection. By using a specially crafted request, an attacker could e 2.0%
CVE-2022-22310 Medium 4.8 IBM WebSphere Application Server Liberty 21.0.0.10 through 21.0.0.12 could provide weaker than expected security. A remote attacker could exploit this weakness to obtain sensitive information and gain 1.0%
CVE-2021-29842 Low 3.7 IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 21.0.0.9 could allow a remote user to enumerate usernames due to a difference of responses from valid and invalid login 1.3%
CVE-2020-4590 Medium 5.3 IBM WebSphere Application Server Liberty 17.0.0.3 through 20.0.0.9 running oauth-2.0 or openidConnectServer-1.0 server features is vulnerable to a denial of service attack conducted by an authenticate 1.2%
CVE-2020-4421 Medium 5.0 IBM WebSphere Application Liberty 19.0.0.5 through 20.0.0.4 could allow an authenticated user using openidconnect to spoof another users identify. IBM X-Force ID: 180084. 0.6%
CVE-2020-4329 Medium 4.3 IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 20.0.0.4 could allow a remote, authenticated attacker to obtain sensitive information, caused by improper parameter che 1.1%
CVE-2020-4304 Medium 6.1 IBM WebSphere Application Server - Liberty 17.0.0.3 through 20.0.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus alteri 0.8%
CVE-2020-4303 Medium 6.1 IBM WebSphere Application Server - Liberty 17.0.0.3 through 20.0.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus alteri 0.8%