Websphere Application Server
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:websphere_application_server:9.0.0:*:*:*:*:*:*:*
part: a version: 9.0.0 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Websphere Application Server (5c21357a-8af1-5af9-af3a-1e448beb43b2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-9320 |
vulnerable | 2026-07-29 01:09:06.995497 |
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities
MEDIUM (5.9)
IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources.
Published: 2026-06-22T14:53:36.057Z
Updated: 2026-06-22T16:05:22.609Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9071 |
vulnerable | 2026-07-29 01:09:06.632244 |
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by Uncontrolled Resource Consumption
HIGH (7.5)
IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources.
Published: 2026-06-22T14:47:39.502Z
Updated: 2026-06-23T13:39:22.340Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9006 |
vulnerable | 2026-07-29 01:09:06.564212 |
IBM WebSphere Application Server is affected by server-side request forgery
HIGH (7.4)
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to server-side request forgery (SSRF) with the Ajax Proxy configured. This may allow an attacker to send unauthorized requests from the system, resulting in a security bypass or information disclosure.
Published: 2026-06-22T14:46:47.768Z
Updated: 2026-06-24T03:56:08.241Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-8646 |
vulnerable | 2026-07-29 01:09:06.079630 |
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities
HIGH (7.4)
IBM WebSphere Application Server 9.0 and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are vulnerable to HTTP request smuggling. A remote attacker could smuggle a specially crafted request to the application server thereby allowing the attacker to bypass security controls, spoof identity, escalate privilege, and expose sensitive information.
Published: 2026-06-22T14:44:42.460Z
Updated: 2026-06-24T03:56:09.798Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-11712 |
vulnerable | 2026-07-29 00:23:31.555394 |
IBM WebSphere Application Server is affected by a cross-site scripting vulnerability
CRITICAL (9.3)
IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the administrative console help system.
Published: 2026-06-30T19:45:37.814Z
Updated: 2026-07-01T13:24:16.490Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-11708 |
vulnerable | 2026-07-29 00:23:31.554795 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-11595 |
vulnerable | 2026-07-29 00:23:31.468906 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-11594 |
vulnerable | 2026-07-29 00:23:31.468306 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-11541 |
vulnerable | 2026-07-29 00:23:31.385469 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-10845 |
vulnerable | 2026-07-29 00:23:30.695455 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9330 |
vulnerable | 2026-06-08 08:08:58.906128 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9319 |
vulnerable | 2026-06-08 08:08:58.905376 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9311 |
vulnerable | 2026-06-08 08:08:58.904434 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-8644 |
vulnerable | 2026-06-08 08:08:58.508631 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13333 |
vulnerable | 2026-06-08 07:04:32.018328 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.