Veille CVE

Juillet 2026

25 CVE

Critique 8 Élevée 14 Moyenne 3 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Ibm websphere application server » ✕
  1. CVE-2026-11536 8.5 Élevée

    IBM WebSphere Application Server

    IBM WebSphere Application Server 9.0, and 8.5 is affected by a remote code execution vulnerability in the SOAP/JMX connector.

  2. CVE-2026-9322 7.5 Élevée

    IBM WebSphere Application Server · IBM WebSphere Application Server - Liberty

    IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 are vulnerable to a denial of service via a crafted HTTP request.

  3. CVE-2026-10842 7.5 Élevée

    IBM WebSphere Application Server · IBM WebSphere Application Server - Liberty

    IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 Traditional and Liberty could allow a remote attacker to bypass security constraints.

  4. CVE-2026-14980 8.8 Élevée

    IBM WebSphere Application Server - Liberty · Ibm websphere application server

    IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to cross-site request forgery which could allow an attacker to perform SSRF attacks with elevated privileges when the collectiveController-1.0 feature is enabled.

  5. CVE-2026-11897 7.5 Élevée

    IBM WebSphere Application Server - Liberty · Ibm websphere application server

    IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources.

  6. CVE-2026-11707 9.3 Critique

    IBM Tivoli System Automation Application Manager · Ibm websphere application server

    IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by a cross-site scripting vulnerability in the administrative console login page.

  7. CVE-2026-11383 5.4 Moyenne

    IBM Tivoli System Automation Application Manager · Ibm websphere application server

    IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by cross-site scripting in the Administrative Console.

  8. CVE-2026-2482 8.8 Élevée

    IBM WebSphere Application Server - Liberty · Ibm websphere application server

    IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

  9. CVE-2026-14529 9.8 Critique

    IBM WebSphere Application Server · IBM WebSphere Application Server - Liberty

    IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 traditional is vulnerable to server-side request forgery (SSRF) when the SIP container feature (sipServlet-1.1) is enabled.

  10. CVE-2026-15328 8.1 Élevée

    IBM WebSphere Application Server · IBM WebSphere Application Server - Liberty

    IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty is vulnerable to HTTP request smuggling.

  11. CVE-2026-15325 8.7 Élevée

    IBM WebSphere Application Server · IBM WebSphere Application Server - Liberty

    IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty is vulnerable to HTTP request smuggling due to improper handling of TRACE requests.

  12. CVE-2026-15280 7.5 Élevée

    IBM WebSphere Application Server - Liberty · Ibm websphere application server

    IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 ND Collective Controller is affected by a path-segment injection vulnerability in the collective routing mechanism.

  13. CVE-2026-15064 8.7 Élevée

    IBM WebSphere Application Server · IBM WebSphere Application Server - Liberty

    IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty is vulnerable to HTTP Response Smuggling due to improper handling of non-standard HTTP version tokens.

  14. CVE-2026-15057 7.5 Élevée

    IBM WebSphere Application Server - Liberty · Ibm websphere application server

    IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to a denial of service due to uncontrolled heap allocation.

  15. CVE-2026-14981 7.5 Élevée

    IBM WebSphere Application Server · IBM WebSphere Application Server - Liberty

    IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty are affected by a denial of service vulnerability in the HTTP channel due to unbounded allocation of resources without limits.

  16. CVE-2026-14976 9.8 Critique

    IBM WebSphere Application Server - Liberty · Ibm websphere application server

    IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by remote code execution with the collectiveController-1.0 feature enabled.

  17. CVE-2026-14974 9.8 Critique

    IBM WebSphere Application Server

    IBM WebSphere Application Server 8.5, and 9.0 traditional could allow a remote attacker to execute arbitrary code caused by unsafe deserialization of untrusted data.

  18. CVE-2026-14528 7.5 Élevée

    IBM WebSphere Application Server

    IBM WebSphere Application Server 9.0, and 8.5 traditional could allow a remote attacker to obtain sensitive information.

  19. CVE-2026-14515 6.1 Moyenne

    IBM WebSphere Application Server

    IBM WebSphere Application Server 8.5, and 9.0 traditional could allow a remote attacker to conduct a cross-site scripting attack.

  20. CVE-2026-14512 9.8 Critique

    IBM WebSphere Application Server

    IBM WebSphere Application Server 9.0, and 8.5 traditional is vulnerable to pre-authentication unsafe deserialization which could allow a remote attacker to bypass authentication or execute arbitrary code.

  21. CVE-2026-14446 9.8 Critique

    IBM WebSphere Application Server

    IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to broken access control/privilege escalation in the administrative console.

  22. CVE-2026-16192 6.5 Moyenne

    IBM WebSphere Application Server - Liberty · Ibm websphere application server

    IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of service vulnerability when the restConnector-2.0 feature is enabled.

  23. CVE-2026-16184 9.8 Critique

    IBM WebSphere Application Server

    IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to bypass authentication by sending a crafted unauthenticated request.

  24. CVE-2026-9171 7.5 Élevée

    IBM PowerVM Novalink

    IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources.

  25. CVE-2026-11541 9.8 Critique

    IBM CICS Transaction Gateway for Multiplatforms · Ibm websphere application server

    IBM CICS Transaction Gateway for Multiplatforms 9.1, 9.2, 9.3, and 10.1 IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are affected by an HTTP request smuggling vulnerability.