What’s Vulnerable › Products
IBM WebSphere Application Server vulnerabilities
535 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 105 published in the last 12 months.
Check whether your IBM WebSphere Application Server version is affected
Exploited IBM WebSphere Application Server vulnerabilities
- CVE-2015-7450 — IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.
Latest IBM WebSphere Application Server vulnerabilities
- CVE-2026-95696 — IBM WebSphere Application Server Liberty Denial of Service (CVSS 7.5)
- CVE-2026-95695 — IBM WebSphere Application Server Liberty Incorrect Authorization (CVSS 9.1)
- CVE-2026-93909 — IBM WebSphere Application Server Liberty is affected by an authentication bypass (CVSS 9.1)
- CVE-2026-93905 — IBM WebSphere Application Server Liberty is affected by a deserialization of untrusted data (CVSS 8.2)
- CVE-2026-93895 — IBM WebSphere Application Server Liberty Improper Access Control (CVSS 9.1)
- CVE-2026-79715 — IBM WebSphere Application Server Liberty Path Traversal (CVSS 5.5)
- CVE-2026-77816 — IBM WebSphere Application Server Liberty Improper Certificate Validation (CVSS 6.5)
- CVE-2026-14909 — IBM WebSphere Application Server Liberty Information Disclosure (CVSS 6.5)
- CVE-2026-14532 — IBM WebSphere Application Server Liberty Integer Overflow (CVSS 4.3)
- CVE-2026-11713 — IBM WebSphere Application Server Liberty Incorrect Authorization (CVSS 5.4)
- CVE-2026-105443 — IBM WebSphere Application Server Liberty is affected by an improper access control (CVSS 8.2)
- CVE-2026-105442 — IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a deserialization of untrusted data (CVSS 7.5)
- CVE-2026-101294 — IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a missing cryptographic step (CVSS 8.7)
- CVE-2026-95680 — IBM WebSphere Application Server is affected by an authorization bypass (CVSS 8.0)
- CVE-2026-93907 — IBM WebSphere Application Server is affected by a bypass authentication vulnerability (CVSS 8.1)
- CVE-2026-103499 — IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service (CVSS 7.5)
- CVE-2026-11722 — IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty HTTP Request Smuggling (CVSS 4.8)
- CVE-2026-11711 — IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities (CVSS 6.5)
- CVE-2026-11710 — IBM WebSphere Application Server is affected by an HTTP request smuggling vulnerability (CVSS 6.5)
- CVE-2026-11549 — IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty Improper Access Control (CVSS 6.5)
- CVE-2026-11548 — IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty HTTP Request Smuggling (CVSS 4.8)
- CVE-2026-11545 — IBM WebSphere Application Server is affected by a privilege escalation (CVSS 3.7)
- CVE-2026-11540 — IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities (CVSS 5.3)
- CVE-2026-11539 — IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities (CVSS 5.3)
- CVE-2026-11538 — IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities (CVSS 5.3)