Vulnerabilidades do Ibm WebSphere Application Server - Liberty
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Ibm WebSphere Application Server - Liberty: 29 registro(s), com versões afetadas e correções.
CVE-2026-95696
Média · 6.5
CWE-400 13/10/2026
IBM WebSphere Application Server Liberty Denial of Service
IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to cause a denial of service due to an uncaught exception.
CVE-2026-95695
Alta · 7.4
CWE-863 13/10/2026
IBM WebSphere Application Server Liberty Incorrect Authorization
IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to bypass security restrictions due to incorrect authorization.
CVE-2026-93909
Crítica · 9.1
CWE-384 13/10/2026
IBM WebSphere Application Server Liberty is affected by an authentication bypass
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 is vulnerable by an authentication bypass vulnerability when samlWeb-2.0 feature is enabled.
CVE-2026-93905
Alta · 8.2
CWE-502 13/10/2026
IBM WebSphere Application Server Liberty is affected by a deserialization of untrusted data
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 could allow an unauthenticated remote attacker to corrupt the persisted status of batch job instances.
CVE-2026-93895
Crítica · 9.1
CWE-284 13/10/2026
IBM WebSphere Application Server Liberty Improper Access Control
IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access controls configured on gRPC service methods.
CVE-2026-79715
Média · 5.5
CWE-22 13/10/2026
IBM WebSphere Application Server Liberty Path Traversal
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a local attacker to traverse directories on the system. An attacker could use a specially crafted application archive to write files outside the intended directory.
CVE-2026-77816
Média · 6.5
CWE-295 13/10/2026
IBM WebSphere Application Server Liberty Improper Certificate Validation
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 administrative client could allow man-in-the-middle attacks. An attacker could exploit this vulnerability to obtain sensitive information.
CVE-2026-14909
Média · 6.5
CWE-209 13/10/2026
IBM WebSphere Application Server Liberty Information Disclosure
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by an information disclosure vulnerability that allows an authenticated attacker to obtain sensitive information when restConnector-2.0 is enbabled.
CVE-2026-14532
Média · 4.3
CWE-190 13/10/2026
IBM WebSphere Application Server Liberty Integer Overflow
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a Reader-role attacker to obtain version information that causes an uncaught exception.
CVE-2026-11713
Média · 5.4
CWE-863 13/10/2026
IBM WebSphere Application Server Liberty Incorrect Authorization
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by a privilege escalation vulnerability with the restConnector-2.0 feature enabled.
CVE-2026-105443
Alta · 8.2
CWE-284 13/10/2026
IBM WebSphere Application Server Liberty is affected by an improper access control
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 has insufficient isolation between servers sharing an install.
CVE-2026-105442
Alta · 7.5
CWE-502 13/10/2026
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a deserialization of untrusted data
IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 Liberty could allow a remote attacker to cause a denial of service caused by an insecure deserialization in the messaging service.
CVE-2026-101294
Alta · 8.7
CWE-325 13/10/2026
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a missing cryptographic step
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass cryptographic signature verification due to improper verification of cryptographic signature.
CVE-2026-103499
Alta · 7.5
CWE-400 13/10/2026
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere...
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 Liberty could allow a remote unauthenticated attacker to cause a denial of service due to uncontrolled resource consumption.
CVE-2026-11806
Alta · 7.5
CWE-444 30/06/2026
IBM WebSphere Application Server Liberty is affected by a an arbitrary file read vulnerability
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 is affected by an arbitrary file read vulnerability with the restConnector-2.0 feature enabled.
CVE-2026-11714
Crítica · 9.8
CWE-918 30/06/2026
IBM WebSphere Application Server Liberty: SSRF no recurso apiDiscovery-1.0
O IBM WebSphere Application Server Liberty é afetado por uma vulnerabilidade de server-side request forgery com o recurso apiDiscovery-1.0 habilitado.
CVE-2026-11546
Crítica · 9.8
CWE-918 30/06/2026
IBM WebSphere Application Server Liberty: SSRF (CVE-2026-11546)
IBM WebSphere Application Server - Liberty 17.0.0.3 até 26.0.0.7 é afetado por uma vulnerabilidade de falsificação de requisição do lado do servidor (server-side request forgery) com o recurso adminCenter-1.0 habilitado.
CVE-2026-9320
Alta · 7.5
CWE-400 22/06/2026
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities
IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources.
CVE-2026-9071
Alta · 7.5
CWE-400 22/06/2026
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by Uncontrolled Resource Consumption
IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources.
CVE-2026-8646
Crítica · 9.1
CWE-444 22/06/2026
Vulnerabilidade de HTTP Request Smuggling no IBM WebSphere Application Server e Liberty
Os produtos IBM WebSphere Application Server 9.0 e 8.5 e IBM WebSphere Application Server - Liberty 17.0.0.3 até 26.0.0.6 são vulneráveis a HTTP request smuggling. Um atacante remoto poderia contrabandear uma requisição especialmente elaborada para o servidor de aplicação, permitindo ao atacante contornar controles de segurança, falsificar identidade, escalar privilégios e expor informações sensíveis.
CVE-2026-5516
Média · 5.9
CWE-362 27/05/2026
IBM WebSphere Application Server Liberty is affected by a security bypass vulnerability
IBM WebSphere Application Server - Liberty 22.0.0.11 through 26.0.0.5 IBM WebSphere Application Server Liberty could allow a remote attacker to bypass security under limited conditions by exploiting a specific timing window.
CVE-2026-4410
Alta · 7.5
CWE-400 27/05/2026
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service
IBM WebSphere Application Server - Liberty 19.0.0.7 through 26.0.0.5 and IBM WebSphere Application Server 9.0, and 8.5 and WebSphere Application Server Liberty are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources.
CVE-2026-3621
Média · 5.9
CWE-269 22/04/2026
IBM WebSphere Application Server Liberty is affected by identity spoofing
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.4 IBM WebSphere Application Server Liberty is vulnerable to identity spoofing under limited conditions when an application is deployed without authentication and authorization configured.
CVE-2026-1561
Média · 5.4
CWE-918 25/03/2026
IBM WebSphere Application Server Liberty Server-Side Request Forgery
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty is vulnerable to server-side request forgery (SSRF). This may allow remote attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
CVE-2025-14917
Crítica · 9.8
CWE-1393 25/03/2026
IBM WebSphere Application Server Liberty could provide weaker than expected security
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty could provide weaker than expected security when administering security settings.