Known Vulnerabilities for WebSphere Application Server by IBM
Listed below are 10 of the newest known vulnerabilities associated with "WebSphere Application Server" by "IBM".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-18499 json | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to a privilege escalation when using Liber... | Not Provided | 2026-08-12 | 2026-08-13 |
| CVE-2026-16435 json | IBM WebSphere Application Server 9.0, and 8.5 is affected by an authentication bypass vulnerability when using XD or Intellig... | Not Provided | 2026-09-14 | 2026-09-15 |
| CVE-2026-16192 json | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of service vulnerability when th... | Not Provided | 2026-07-28 | 2026-07-29 |
| CVE-2026-16190 json | IBM WebSphere Application Server 9.0, and 8.5 is affected by an authorization bypass vulnerability. | Not Provided | 2026-09-14 | 2026-09-15 |
| CVE-2026-16189 json | IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to inject forged log entries into the server's ad... | Not Provided | 2026-09-14 | 2026-09-15 |
| CVE-2026-16188 json | IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to inject forged log entries into the server's ad... | Not Provided | 2026-09-14 | 2026-09-14 |
| CVE-2026-16187 json | IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to bypass authentication and obtain sensitive inf... | Not Provided | 2026-09-14 | 2026-09-14 |
| CVE-2026-16186 json | IBM WebSphere Application Server 9.0, and 8.5 is affected by a reflected cross-site scripting vulnerability. | Not Provided | 2026-09-14 | 2026-09-15 |
| CVE-2026-16185 json | IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to bypass authentication on an admin console serv... | Not Provided | 2026-09-14 | 2026-09-14 |
| CVE-2026-16184 json | IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to bypass authentication by sending a crafted una... | Not Provided | 2026-07-28 | 2026-07-29 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Ibm | Websphere Application Server | 9.0.5.7 | |||
| Application | Ibm | Websphere Application Server | 9.0.5.6 | |||
| Application | Ibm | Websphere Application Server | 9.0.5.5 | |||
| Application | Ibm | Websphere Application Server | 9.0.5.5 | |||
| Application | Ibm | Websphere Application Server | 9.0.5.4 | |||
| Application | Ibm | Websphere Application Server | 9.0.5.3 | |||
| Application | Ibm | Websphere Application Server | 9.0.5.3 | |||
| Application | Ibm | Websphere Application Server | 9.0.5.2 | |||
| Application | Ibm | Websphere Application Server | 9.0.5.2 | |||
| Application | Ibm | Websphere Application Server | 9.0.5.1 | |||
| Application | Ibm | Websphere Application Server | 9.0.5.1 | |||
| Application | Ibm | Websphere Application Server | 9.0.5.1 | |||
| Application | Ibm | Websphere Application Server | 9.0.5.0 | |||
| Application | Ibm | Websphere Application Server | 9.0.0.9 | |||
| Application | Ibm | Websphere Application Server | 9.0.0.8 | |||
| Application | Ibm | Websphere Application Server | 9.0.0.7 | |||
| Application | Ibm | Websphere Application Server | 9.0.0.6 | |||
| Application | Ibm | Websphere Application Server | 9.0.0.5 | |||
| Application | Ibm | Websphere Application Server | 9.0.0.4 | |||
| Application | Ibm | Websphere Application Server | 9.0.0.3 |