Veille CVE

Semaine du 29 juin au 5 juillet 2026

9 CVE

Critique 5 Élevée 2 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Ibm websphere application server » ✕
  1. CVE-2026-11541 9.8 Critique

    IBM CICS Transaction Gateway for Multiplatforms · Ibm websphere application server

    IBM CICS Transaction Gateway for Multiplatforms 9.1, 9.2, 9.3, and 10.1 IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are affected by an HTTP request smuggling vulnerability.

  2. CVE-2026-11594 6.1 Moyenne

    IBM WebSphere Application Server

    IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the administrative console.

  3. CVE-2026-9002 6.5 Moyenne

    IBM WebSphere Extreme Scale

    IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 could allow an adjacent attacker to cause a denial of service due to improper validation in the XDF decoder. The application processes deeply nested Protocol Buffers messages and attacker-controlled length prefixes without sufficient bounds checking, which may allow an attacker on the same network to trigger a StackOverflowError or OutOfMemoryError, resulting in a crash of the WebSphere Application Server JVM.

  4. CVE-2026-11806 7.5 Élevée

    IBM WebSphere Application Server - Liberty · Ibm websphere application server

    IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 is affected by an arbitrary file read vulnerability with the restConnector-2.0 feature enabled.

  5. CVE-2026-11714 9.8 Critique

    IBM WebSphere Application Server - Liberty · Ibm websphere application server

    IBM WebSphere Application Server Liberty is affected by a server-side request forgery vulnerability with the apiDiscovery-1.0 feature enabled.

  6. CVE-2026-11712 9.3 Critique

    IBM WebSphere Application Server

    IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the administrative console help system.

  7. CVE-2026-11708 9.3 Critique

    IBM WebSphere Application Server

    IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the administrative console's integrated help system.

  8. CVE-2026-11595 7.5 Élevée

    IBM WebSphere Application Server

    IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to obtain sensitive information from the administrative console's integrated help system.

  9. CVE-2026-11546 9.8 Critique

    IBM WebSphere Application Server - Liberty · Ibm websphere application server

    IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is affected by a server-side request forgery vulnerability with the adminCenter-1.0 feature enabled.