Veille CVE

Jeudi 30 juillet 2026

7 CVE

Critique 1 Élevée 5 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Ibm websphere application server » ✕
  1. CVE-2026-11536 8.5 Élevée

    IBM WebSphere Application Server

    IBM WebSphere Application Server 9.0, and 8.5 is affected by a remote code execution vulnerability in the SOAP/JMX connector.

  2. CVE-2026-9322 7.5 Élevée

    IBM WebSphere Application Server · IBM WebSphere Application Server - Liberty

    IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 are vulnerable to a denial of service via a crafted HTTP request.

  3. CVE-2026-10842 7.5 Élevée

    IBM WebSphere Application Server · IBM WebSphere Application Server - Liberty

    IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 Traditional and Liberty could allow a remote attacker to bypass security constraints.

  4. CVE-2026-14980 8.8 Élevée

    IBM WebSphere Application Server - Liberty · Ibm websphere application server

    IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to cross-site request forgery which could allow an attacker to perform SSRF attacks with elevated privileges when the collectiveController-1.0 feature is enabled.

  5. CVE-2026-11897 7.5 Élevée

    IBM WebSphere Application Server - Liberty · Ibm websphere application server

    IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources.

  6. CVE-2026-11707 9.3 Critique

    IBM Tivoli System Automation Application Manager · Ibm websphere application server

    IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by a cross-site scripting vulnerability in the administrative console login page.

  7. CVE-2026-11383 5.4 Moyenne

    IBM Tivoli System Automation Application Manager · Ibm websphere application server

    IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by cross-site scripting in the Administrative Console.