IBM WebSphere eXtreme Scale

9 vulnérabilités publiées citent ce produit.

Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.

CVEVersions vulnérablesTitreSévéritéPubliéeEPSSExploitation
CVE-2026-137598.6.1.0 – 8.6.1.6IBM WebSphere eXtreme Scale is affected by Insecure DeserilizationHIGH 8.80.5 %
CVE-2026-137728.6.1.0 – 8.6.1.6IBM WebSphere eXtreme Scale's OQL is affected by remote code executionCRITICAL 9.90.5 %
CVE-2026-137738.6.1.0 – 8.6.1.6IBM WebSphere eXtreme Scale is affected by server side request forgery when ORB is used as Transport ProtocolCRITICAL 10.06.1 %
CVE-2026-90028.6.1.0 – 8.6.1.6IBM WebSphere eXtremes Scale is affected by uncontrolled resource consumption when XDF is enabledMEDIUM 6.50.3 %
CVE-2020-43368.6.1IBM WebSphere eXtreme Scale 8.6.1 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized paMEDIUM 5.31.0 %
CVE-2019-41158.6IBM WebSphere eXtreme Scale 8.6 Admin API is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScriMEDIUM 5.40.7 %
CVE-2019-41128.6IBM WebSphere eXtreme Scale 8.6 Admin Console allows web pages to be stored locally which can be read by another user on the system. IBM X-FMEDIUM 4.00.3 %
CVE-2019-41098.6IBM WebSphere eXtreme Scale 8.6 Admin Console could allow a remote attacker to hijack the clicking action of the victim. By persuading a vicMEDIUM 6.11.3 %
CVE-2019-41068.6IBM WebSphere eXtreme Scale 8.6 Admin Console is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaMEDIUM 4.80.7 %