Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:liberty:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductWebsphere Application Server (5c21357a-8af1-5af9-af3a-1e448beb43b2)
Edition*
Language*
Software editionliberty
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-3621 vulnerable 2026-06-08 08:01:19.088629 IBM WebSphere Application Server Liberty is affected by identity spoofing
HIGH (7.5)
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.4 IBM WebSphere Application Server Liberty is vulnerable to identity spoofing under limited conditions when an application is deployed without authentication and authorization configured.
Published: 2026-04-22T23:07:31.595Z
Updated: 2026-04-24T03:55:15.371Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1561 vulnerable 2026-06-08 07:49:08.895665 IBM WebSphere Application Server Liberty Server-Side Request Forgery
MEDIUM (5.4)
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty is vulnerable to server-side request forgery (SSRF). This may allow remote attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
Published: 2026-03-25T20:10:10.168Z
Updated: 2026-03-26T15:37:14.525Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36124 vulnerable 2026-06-08 07:21:01.081779 IBM WebSphere Application Server Liberty bypass security
MEDIUM (5.9)
IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.8 could allow a remote attacker to bypass security restrictions caused by a failure to honor JMS messaging configuration
Published: 2025-08-12T18:45:24.453Z
Updated: 2025-08-12T20:37:21.958Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36097 vulnerable 2026-06-08 07:21:00.951886 IBM WebSphere Application Server denial of service
HIGH (7.5)
IBM WebSphere Application Server 9.0 and WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.7 are vulnerable to a denial of service, caused by a stack-based overflow. An attacker can send a specially crafted request that cause the server to consume excessive memory resources.
Published: 2025-07-16T17:44:14.979Z
Updated: 2025-08-18T01:34:17.799Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36047 vulnerable 2026-06-08 07:21:00.708299 IBM WebSphere Application Server Liberty denial of service
MEDIUM (5.3)
IBM WebSphere Application Server Liberty 18.0.0.2 through 25.0.0.8 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources.
Published: 2025-08-14T15:38:11.020Z
Updated: 2025-11-03T19:54:04.049Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36000 vulnerable 2026-06-08 07:21:00.231148 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14923 vulnerable 2026-06-08 07:06:35.375037 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14917 vulnerable 2026-06-08 07:06:35.362236 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14915 vulnerable 2026-06-08 07:06:35.357391 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14914 vulnerable 2026-06-08 07:06:35.355579 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12635 vulnerable 2026-06-08 07:04:30.576952 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-56339 vulnerable 2026-06-08 06:54:17.742554 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27270 vulnerable 2026-06-08 06:31:28.390941 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27268 vulnerable 2026-06-08 06:31:28.380059 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25026 vulnerable 2026-06-08 06:29:42.211026 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22354 vulnerable 2026-06-08 06:29:34.633683 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22353 vulnerable 2026-06-08 06:29:34.632703 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22329 vulnerable 2026-06-08 06:29:34.557602 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50314 vulnerable 2026-06-08 06:16:15.938403 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50312 vulnerable 2026-06-08 06:16:15.932921 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38737 vulnerable 2026-06-08 06:08:18.771102 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34165 vulnerable 2026-06-08 05:44:52.245472 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22476 vulnerable 2026-06-08 05:40:53.788236 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22475 vulnerable 2026-06-08 05:40:53.787590 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22393 vulnerable 2026-06-08 05:40:53.708196 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22310 vulnerable 2026-06-08 05:40:08.181110 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-39038 vulnerable 2026-06-08 05:33:48.802811 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-39031 vulnerable 2026-06-08 05:33:48.793999 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29842 vulnerable 2026-06-08 05:31:27.082898 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20492 vulnerable 2026-06-08 05:29:09.330205 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4590 vulnerable 2026-06-08 05:26:40.501082 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4421 vulnerable 2026-06-08 05:25:59.308978 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4329 vulnerable 2026-06-08 05:25:59.202943 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4304 vulnerable 2026-06-08 05:25:59.152582 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4303 vulnerable 2026-06-08 05:25:59.152111 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10693 vulnerable 2026-06-08 05:16:35.668051 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4720 vulnerable 2026-06-08 05:13:57.428734 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4663 vulnerable 2026-06-08 05:13:57.383694 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4441 vulnerable 2026-06-08 05:13:57.179331 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4305 vulnerable 2026-06-08 05:13:57.059571 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4304 vulnerable 2026-06-08 05:13:57.059206 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4046 vulnerable 2026-06-08 05:13:56.712758 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1902 vulnerable 2026-06-08 05:11:26.370945 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1851 vulnerable 2026-06-08 05:11:26.311627 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1838 vulnerable 2026-06-08 05:11:26.269637 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1767 vulnerable 2026-06-08 05:11:18.704340 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1755 vulnerable 2026-06-08 05:11:18.696024 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1683 vulnerable 2026-06-08 05:11:18.595120 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1553 vulnerable 2026-06-08 05:11:18.401928 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3042 vulnerable 2026-06-08 05:07:44.133201 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0378 vulnerable 2026-06-08 05:07:15.150263 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.