Known Vulnerabilities for Websphere Application Server by Ibm
Listed below are 10 of the newest known vulnerabilities associated with "Websphere Application Server" by "Ibm".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-1561 json | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty is vulnerable t... | Not Provided | 2026-03-25 | 2026-03-26 |
| CVE-2025-14917 json | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty could provide w... | Not Provided | 2026-03-25 | 2026-03-27 |
| CVE-2025-14915 json | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty is affected by ... | Not Provided | 2026-03-25 | 2026-03-27 |
| CVE-2024-22353 json | 7.5 - HIGH | 2024-03-31 | 2024-04-02 | |
| CVE-2023-38737 json | IBM WebSphere Application Server Liberty 22.0.0.13 through 23.0.0.7 is vulnerable to a denial of service, caused by sending a... | 7.5 - HIGH | 2023-08-16 | 2023-08-22 |
| CVE-2023-35890 json | IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security, caused by the improper encoding in ... | 5.5 - MEDIUM | 2023-07-07 | 2023-07-12 |
| CVE-2023-30441 json | IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0 through 8.0.7.11 components could expose sensiti... | 7.5 - HIGH | 2023-04-29 | 2023-05-09 |
| CVE-2023-27554 json | IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing ... | 9.1 - CRITICAL | 2023-05-11 | 2023-05-22 |
| CVE-2023-26283 json | IBM WebSphere Application Server 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrar... | 5.4 - MEDIUM | 2023-04-02 | 2023-11-07 |
| CVE-2023-24966 json | IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed ... | 6.1 - MEDIUM | 2023-04-27 | 2023-05-04 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Ibm | Websphere Application Server | 9.0.5.7 | |||
| Application | Ibm | Websphere Application Server | 9.0.5.6 | |||
| Application | Ibm | Websphere Application Server | 9.0.5.5 | |||
| Application | Ibm | Websphere Application Server | 9.0.5.5 | |||
| Application | Ibm | Websphere Application Server | 9.0.5.4 | |||
| Application | Ibm | Websphere Application Server | 9.0.5.3 | |||
| Application | Ibm | Websphere Application Server | 9.0.5.3 | |||
| Application | Ibm | Websphere Application Server | 9.0.5.2 | |||
| Application | Ibm | Websphere Application Server | 9.0.5.2 | |||
| Application | Ibm | Websphere Application Server | 9.0.5.1 | |||
| Application | Ibm | Websphere Application Server | 9.0.5.1 | |||
| Application | Ibm | Websphere Application Server | 9.0.5.1 | |||
| Application | Ibm | Websphere Application Server | 9.0.5.0 | |||
| Application | Ibm | Websphere Application Server | 9.0.0.9 | |||
| Application | Ibm | Websphere Application Server | 9.0.0.8 | |||
| Application | Ibm | Websphere Application Server | 9.0.0.7 | |||
| Application | Ibm | Websphere Application Server | 9.0.0.6 | |||
| Application | Ibm | Websphere Application Server | 9.0.0.5 | |||
| Application | Ibm | Websphere Application Server | 9.0.0.4 | |||
| Application | Ibm | Websphere Application Server | 9.0.0.3 |