IBM Websphere Application Server Liberty vulnerabilities, page 3

44 vulnerabilities

Known vulnerabilities in IBM Websphere Application Server Liberty, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.7CVE-2026-15325ibmwebsphere_application_server+1
EPSS score
0.34%
IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty is vulnerable to HTTP request smuggling due to improper handling of TRACE requests.9.8CVE-2026-8400ibmwebsphere_application_server+1
EPSS score
0.48%
IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty Continuous delivery has a flaw in the ORB component in IBM SDK, Java Technology Edition, may allow a malicious IIOP server to induce loading and instantation of arbitrary classes.9.1CVE-2026-8646ibmwebsphere_application_server+1
EPSS score
0.59%
IBM WebSphere Application Server 9.0 and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are vulnerable to HTTP request smuggling. A remote attacker could smuggle a specially crafted request to the application server thereby allowing the attacker to bypass security controls, spoof identity, escalate privilege, and expose sensitive information.7.5CVE-2026-3621ibmwebsphere_application_server+1
EPSS score
0.37%
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.4 IBM WebSphere Application Server Liberty is vulnerable to identity spoofing under limited conditions when an application is deployed without authentication and authorization configured.