IBM WebSphere Application Server - Liberty
51 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-93905 | 17.0.0.3 – 26.0.0.10 | IBM WebSphere Application Server Liberty is affected by a deserialization of untrusted data | HIGH 8.2 | 0.3 % | ||
| CVE-2026-93909 | 17.0.0.3 – 26.0.0.10 | IBM WebSphere Application Server Liberty is affected by an authentication bypass | CRITICAL 9.1 | 0.3 % | ||
| CVE-2026-93895 | 20.0.0.12 – 26.0.0.10 | IBM WebSphere Application Server Liberty Improper Access Control | CRITICAL 9.1 | 0.4 % | ||
| CVE-2026-95695 | 20.0.0.12 – 26.0.0.10 | IBM WebSphere Application Server Liberty Incorrect Authorization | CRITICAL 9.1 | 0.3 % | ||
| CVE-2026-95696 | 20.0.0.12 – 26.0.0.10 | IBM WebSphere Application Server Liberty Denial of Service | HIGH 7.5 | 0.3 % | ||
| CVE-2026-101294 | 17.0.0.3 – 26.0.0.10 | IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a missing cryptographic step | HIGH 8.7 | 0.2 % | ||
| CVE-2026-105442 | 17.0.0.3 – 26.0.0.10 | IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a deserialization of untrusted data | HIGH 7.5 | 0.4 % | ||
| CVE-2026-105443 | 17.0.0.3 – 26.0.0.10 | IBM WebSphere Application Server Liberty is affected by an improper access control | HIGH 8.2 | 0.2 % | ||
| CVE-2026-11713 | 17.0.0.3 – 26.0.0.9 | IBM WebSphere Application Server Liberty Incorrect Authorization | MEDIUM 5.4 | 0.2 % | ||
| CVE-2026-14532 | 17.0.0.3 – 26.0.0.9 | IBM WebSphere Application Server Liberty Integer Overflow | MEDIUM 4.3 | 0.2 % | ||
| CVE-2026-14909 | 17.0.0.3 – 26.0.0.9 | IBM WebSphere Application Server Liberty Information Disclosure | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-77816 | 17.0.0.3 – 26.0.0.9 | IBM WebSphere Application Server Liberty Improper Certificate Validation | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-79715 | 17.0.0.3 – 26.0.0.9 | IBM WebSphere Application Server Liberty Path Traversal | MEDIUM 5.5 | 0.1 % | ||
| CVE-2026-103499 | 17.0.0.3 – 26.0.0.10 | IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service | HIGH 7.5 | 0.4 % | ||
| CVE-2026-11722 | 17.0.0.3 – 26.0.0.5 | IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty HTTP Request Smuggling | MEDIUM 4.8 | 0.3 % | ||
| CVE-2026-11549 | 17.0.0.3 – 26.0.0.5 | IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty Improper Access Control | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-11548 | 17.0.0.3 – 26.0.0.5 | IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty HTTP Request Smuggling | MEDIUM 4.8 | 0.3 % | ||
| CVE-2026-10841 | 17.0.0.3 – 26.0.0.5 | IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty HTTP Request Smuggling | MEDIUM 4.8 | 0.2 % | ||
| CVE-2026-15396 | 17.0.0.3 – 26.0.0.5 | IBM WebSphere Application Server IBM WebSphere Application Server - Liberty HTTP Request Smuggling | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-15412 | 17.0.0.3 – 26.0.0.5 | IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty Open Redirect | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-15634 | 17.0.0.3 – 26.0.0.5 | IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty Request Smuggling | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-14525 | 17.0.0.3 – 26.0.0.8 | IBM WebSphere Application Server Liberty is affected by an authenication bypass | CRITICAL 9.4 | 0.5 % | ||
| CVE-2026-10571 | 17.0.0.3 – 26.0.0.8 | IBM WebSphere Application Server Liberty is affected by a denial of service | MEDIUM 5.7 | 0.6 % | ||
| CVE-2026-18499 | 17.0.0.3 – 26.0.0.8 | IBM WebSphere Application Server Liberty is affected by a privilege escalation | HIGH 8.1 | 0.4 % | ||
| CVE-2026-8400 | Continuous delivery | Multiple Vulnerabilities in IBM® Java SDK affect IBM WebSphere Application Server and WebSphere Application Server Liberty due to the Jul… | CRITICAL 9.8 | 0.5 % | ||
| CVE-2026-9322 | 17.0.0.3 – 26.0.0.7 | IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities | HIGH 7.5 | 0.6 % | ||
| CVE-2026-10842 | 17.0.0.3 – 26.0.0.7 | IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a security bypass vulnerability | HIGH 7.5 | 0.5 % | ||
| CVE-2026-11897 | 17.0.0.3 – 26.0.0.7 | IBM WebSphere Application Server Liberty is affected by a denial of service vulnerability with HTTP/2 | HIGH 7.5 | 0.5 % | ||
| CVE-2026-14980 | 17.0.0.3 – 26.0.0.8 | IBM WebSphere Application Server Liberty is affected by a cross-site request forgery | HIGH 8.8 | 0.4 % | ||
| CVE-2026-2482 | 17.0.0.3 – 26.0.0.8 | IBM WebSphere Application Server Liberty is affected by a cross-site request forgery | HIGH 8.8 | 0.2 % | ||
| CVE-2026-14529 | 17.0.0.3 – 26.0.0.8 | IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a server-side request forgery | CRITICAL 9.8 | 0.5 % | ||
| CVE-2026-14976 | 17.0.0.3 – 26.0.0.8 | IBM WebSphere Application Server Liberty is affected by a remote code execution and path-segment injection vulnerability | CRITICAL 9.8 | 0.6 % | ||
| CVE-2026-14981 | 17.0.0.3 – 26.0.0.7 | IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities | HIGH 7.5 | 0.5 % | ||
| CVE-2026-15057 | 17.0.0.3 – 26.0.0.7 | IBM WebSphere Application Server Liberty is affected by a denial of service vulnerability | HIGH 7.5 | 0.5 % | ||
| CVE-2026-15064 | 17.0.0.3 – 26.0.0.7 | IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities | HIGH 8.7 | 0.3 % | ||
| CVE-2026-15280 | 17.0.0.3 – 26.0.0.8 | IBM WebSphere Application Server Liberty is affected by a remote code execution and path-segment injection vulnerability | HIGH 7.5 | 0.5 % | ||
| CVE-2026-15325 | 17.0.0.3 – 26.0.0.7 | IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities | HIGH 8.7 | 0.3 % | ||
| CVE-2026-15328 | 17.0.0.3 – 26.0.0.7 | IBM WebSphere Application Server and WebSphere Application Server Liberty is inconsistent Interpretation of HTTP Requests | HIGH 8.1 | 0.4 % | ||
| CVE-2026-16192 | 17.0.0.3 – 26.0.0.8 | IBM WebSphere Application Server Liberty is affected by a denial of service | HIGH 7.1 | 0.4 % | ||
| CVE-2026-11546 | 17.0.0.3 – 26.0.0.7 | IBM WebSphere Application Server Liberty is affected by a server-side request forgery vulnerability | CRITICAL 9.8 | 0.4 % | ||
| CVE-2026-11714 | 17.0.0.3 – 26.0.0.7 | IBM WebSphere Application Server Liberty is affected by an authorization bypass vulnerability | CRITICAL 9.8 | 0.4 % | ||
| CVE-2026-11806 | 17.0.0.3 – 26.0.0.6 | IBM WebSphere Application Server Liberty is affected by a an arbitrary file read vulnerability | HIGH 7.5 | 0.5 % | ||
| CVE-2026-9320 | 17.0.0.3 – 26.0.0.6 | IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities | HIGH 7.5 | 0.6 % | ||
| CVE-2026-9071 | 17.0.0.3 – 26.0.0.6 | IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by Uncontrolled Resource Consumption | HIGH 7.5 | 0.6 % | ||
| CVE-2026-8646 | 17.0.0.3 – 26.0.0.6 | IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities | CRITICAL 9.1 | 0.6 % | ||
| CVE-2026-5516 | 22.0.0.11 – 26.0.0.5 | IBM WebSphere Application Server Liberty is affected by a security bypass vulnerability | MEDIUM 5.9 | 0.2 % | ||
| CVE-2026-4410 | 19.0.0.7 – 26.0.0.5 | IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service | HIGH 7.5 | 0.5 % | ||
| CVE-2026-3621 | 17.0.0.3 – 26.0.0.4 | IBM WebSphere Application Server Liberty is affected by identity spoofing | HIGH 7.5 | 0.3 % | ||
| CVE-2025-14917 | 17.0.0.3 – 26.0.0.3 | IBM WebSphere Application Server Liberty could provide weaker than expected security | CRITICAL 9.8 | 0.4 % | ||
| CVE-2025-14915 | 17.0.0.3 – 26.0.0.3 | IBM WebSphere Application Server Liberty is affected by a privilege escalation vulnerability | HIGH 7.2 | 0.6 % | ||
| CVE-2025-14923 | 17.0.0.3 – 26.0.0.2 | IBM WebSphere Application Server Liberty could provide weaker than expected security | CRITICAL 9.8 | 0.2 % |