Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:web_server_plug_ins_for_websphere_application_server_and_websphere_liberty:8.5:*:*:*:*:*:*:*

part: a version: 8.5 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductWeb Server Plug Ins For Websphere Application Server And Websphere Liberty (09aaf834-5919-5f47-9404-475bd25d0fab)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-9170 vulnerable 2026-06-08 08:08:58.861926 IBM HTTP Server is affected by multiple vulnerabilities
IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service and a potential remote code execution due to improper input validation.
Published: 2026-05-26T17:31:55.400Z
Updated: 2026-06-11T14:03:44.285Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8633 vulnerable 2026-06-08 08:08:58.503977 IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities when using when using Web Server Plug-ins
CRITICAL (9.8)
IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to remote code execution in the Web Server Plug-ins, through a specially crafted request.
Published: 2026-05-26T17:19:55.470Z
Updated: 2026-05-27T11:55:40.403Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8620 vulnerable 2026-06-08 08:08:58.494043 IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities when using when using Web Server Plug-ins
HIGH (7.5)
IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to HTTP request smuggling in the Web Server Plug-ins through a specially crafted request.
Published: 2026-05-26T17:15:00.501Z
Updated: 2026-05-27T13:12:59.224Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.