Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:websphere_application_server___liberty:17.0.0.3:*:*:*:*:*:*:*

part: a version: 17.0.0.3 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductWebsphere Application Server Liberty (f876fbab-6525-5c54-a2b8-7d977dcbdd44)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-14976 vulnerable 2026-09-16 04:33:12.478315 IBM WebSphere Application Server Liberty is affected by a remote code execution and path-segment injection vulnerability
HIGH (7.1)
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by remote code execution with the collectiveController-1.0 feature enabled.
Published: 2026-07-28T20:29:09.349Z
Updated: 2026-07-30T14:10:54.485Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-14981 vulnerable 2026-09-16 04:33:11.491522 IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities
HIGH (7.5)
IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 are affected by a denial of service vulnerability in the HTTP channel due to unbounded allocation of resources without limits.
Published: 2026-07-28T20:22:37.986Z
Updated: 2026-07-29T15:24:31.823Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-15057 vulnerable 2026-09-16 04:33:06.842825 IBM WebSphere Application Server Liberty is affected by a denial of service vulnerability
HIGH (7.5)
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to a denial of service due to uncontrolled heap allocation.
Published: 2026-07-28T20:11:58.843Z
Updated: 2026-07-29T13:58:41.586Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-15280 vulnerable 2026-09-16 04:33:06.527625 IBM WebSphere Application Server Liberty is affected by a remote code execution and path-segment injection vulnerability
HIGH (7.5)
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 ND Collective Controller is affected by a path-segment injection vulnerability in the collective routing mechanism.
Published: 2026-07-28T20:09:11.584Z
Updated: 2026-07-29T12:38:22.606Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-15328 vulnerable 2026-09-16 04:33:06.329637 IBM WebSphere Application Server and WebSphere Application Server Liberty is inconsistent Interpretation of HTTP Requests
HIGH (7.4)
IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to HTTP request smuggling.
Published: 2026-07-28T20:04:41.632Z
Updated: 2026-07-30T03:55:30.946Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-15325 vulnerable 2026-09-16 04:33:06.227604 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-15064 vulnerable 2026-09-16 04:33:06.174844 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-9322 vulnerable 2026-09-16 04:33:02.195624 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-16192 vulnerable 2026-09-16 04:32:56.838387 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-9320 vulnerable 2026-07-29 01:09:06.995628 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-9071 vulnerable 2026-07-29 01:09:06.632442 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8646 vulnerable 2026-07-29 01:09:06.086681 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11806 vulnerable 2026-07-29 00:23:31.645893 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11714 vulnerable 2026-07-29 00:23:31.555868 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11546 vulnerable 2026-07-29 00:23:31.402488 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-11541 vulnerable 2026-07-29 00:23:31.398467 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3621 vulnerable 2026-06-08 08:01:19.087098 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14923 vulnerable 2026-06-08 07:06:35.372003 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14917 vulnerable 2026-06-08 07:06:35.362049 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14915 vulnerable 2026-06-08 07:06:35.356778 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.