IBM WebSphere Application Server vulnerabilities

CVEs per yearBy the year they were published

1. 20176
2. 201827
3. 201919
4. 202018
5. 202112
6. 20228
7. 20237
8. 202414
9. 20258
10. 202665

Newest CVEs

• CVE-2026-101294

  IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a missing cryptographic step

  IBM · WebSphere Application Server - Liberty

  High8.7
• CVE-2026-105442

  IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a deserialization of untrusted data

  IBM · WebSphere Application Server

  High7.5
• CVE-2026-93907

  IBM WebSphere Application Server is affected by a bypass authentication vulnerability

  IBM · WebSphere Application Server

  High8.1
• CVE-2026-95680

  IBM WebSphere Application Server is affected by an authorization bypass

  IBM · WebSphere Application Server

  High8.0
• CVE-2026-103499

  IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service

  IBM · WebSphere Application Server - Liberty

  High7.5
• CVE-2026-11722

  IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty HTTP Request Smuggling

  IBM · WebSphere Application Server

  Medium4.8
• CVE-2026-11711

  IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

  IBM · WebSphere Application Server

  Medium6.5
• CVE-2026-11710

  IBM WebSphere Application Server is affected by an HTTP request smuggling vulnerability

  IBM · WebSphere Application Server

  Medium6.5
• CVE-2026-11549

  IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty Improper Access Control

  IBM · WebSphere Application Server

  Medium6.5
• CVE-2026-11548

  IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty HTTP Request Smuggling

  IBM · WebSphere Application Server

  Medium4.8