Websphere Application Server Liberty
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:websphere_application_server___liberty:17.0.0.3:*:*:*:*:*:*:*
part: a version: 17.0.0.3 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Websphere Application Server Liberty (f876fbab-6525-5c54-a2b8-7d977dcbdd44) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-9320 |
vulnerable | 2026-07-29 01:09:06.995628 |
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities
MEDIUM (5.9)
IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources.
Published: 2026-06-22T14:53:36.057Z
Updated: 2026-06-22T16:05:22.609Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9071 |
vulnerable | 2026-07-29 01:09:06.632442 |
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by Uncontrolled Resource Consumption
HIGH (7.5)
IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources.
Published: 2026-06-22T14:47:39.502Z
Updated: 2026-06-23T13:39:22.340Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-8646 |
vulnerable | 2026-07-29 01:09:06.086681 |
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities
HIGH (7.4)
IBM WebSphere Application Server 9.0 and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are vulnerable to HTTP request smuggling. A remote attacker could smuggle a specially crafted request to the application server thereby allowing the attacker to bypass security controls, spoof identity, escalate privilege, and expose sensitive information.
Published: 2026-06-22T14:44:42.460Z
Updated: 2026-06-24T03:56:09.798Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-11806 |
vulnerable | 2026-07-29 00:23:31.645893 |
IBM WebSphere Application Server Liberty is affected by a an arbitrary file read vulnerability
HIGH (7.2)
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 is affected by an arbitrary file read vulnerability with the restConnector-2.0 feature enabled.
Published: 2026-06-30T19:43:17.946Z
Updated: 2026-07-02T03:56:00.900Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-11714 |
vulnerable | 2026-07-29 00:23:31.555868 |
IBM WebSphere Application Server Liberty is affected by an authorization bypass vulnerability
HIGH (8.5)
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is affected by a server-side request forgery vulnerability with the apiDiscovery-1.0 feature enabled.
Published: 2026-06-30T19:44:49.769Z
Updated: 2026-07-01T14:29:56.261Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-11546 |
vulnerable | 2026-07-29 00:23:31.402488 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-11541 |
vulnerable | 2026-07-29 00:23:31.398467 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-3621 |
vulnerable | 2026-06-08 08:01:19.087098 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14923 |
vulnerable | 2026-06-08 07:06:35.372003 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14917 |
vulnerable | 2026-06-08 07:06:35.362049 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14915 |
vulnerable | 2026-06-08 07:06:35.356778 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.