WebSphere Application Server
- Software type
- Application server
- Total vulnerabilities (90 days)
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 11/08/2026, WebSphere Application Server recorded 32 security vulnerabilities in the last 90 days, of which 5 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of WebSphere Application Server and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-95680IBM WebSphere Application Server is affected by an authorization bypassCVE-2026-93907IBM WebSphere Application Server is affected by a bypass authentication vulnerabilityCVE-2026-105442IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a deserialization of untrusted dataCVE-2026-103499IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of serviceCVE-2026-101294IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a missing cryptographic step| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-95680IBM WebSphere Application Server is affected by an authorization bypass | Exploitation statusNot exploited | FixYes |
| SeverityHigh |
CVE-2026-93907IBM WebSphere Application Server is affected by a bypass authentication vulnerability | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityHigh |
|---|
CVE-2026-105442IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a deserialization of untrusted data | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityHigh |
|---|
CVE-2026-103499IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityHigh |
|---|
CVE-2026-101294IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a missing cryptographic step | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityHigh |
|---|
CVE-2026-11722IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty HTTP Request Smuggling | Exploitation statusNot exploited | FixYes | Published09/18/2026 | SeverityMedium |
|---|
CVE-2026-11711IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities | Exploitation statusNot exploited | FixYes | Published09/18/2026 | SeverityMedium |
|---|
CVE-2026-11710IBM WebSphere Application Server is affected by an HTTP request smuggling vulnerability | Exploitation statusNot exploited | FixYes | Published09/18/2026 | SeverityMedium |
|---|
CVE-2026-11549IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty Improper Access Control | Exploitation statusNot exploited | FixYes | Published09/18/2026 | SeverityMedium |
|---|
CVE-2026-11548IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty HTTP Request Smuggling | Exploitation statusNot exploited | FixYes | Published09/18/2026 | SeverityMedium |
|---|
CVE-2026-11545IBM WebSphere Application Server is affected by a privilege escalation | Exploitation statusNot exploited | FixYes | Published09/18/2026 | SeverityLow |
|---|
CVE-2026-11540IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities | Exploitation statusNot exploited | FixYes | Published09/18/2026 | SeverityMedium |
|---|
CVE-2026-11539IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities | Exploitation statusNot exploited | FixYes | Published09/18/2026 | SeverityMedium |
|---|
CVE-2026-11538IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities | Exploitation statusNot exploited | FixYes | Published09/18/2026 | SeverityLow |
|---|
CVE-2026-11537IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities | Exploitation statusNot exploited | FixYes | Published09/18/2026 | SeverityMedium |
|---|
CVE-2026-10841IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty HTTP Request Smuggling | Exploitation statusNot exploited | FixYes | Published09/18/2026 | SeverityMedium |
|---|
CVE-2026-16435IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities | Exploitation statusNot exploited | FixYes | Published09/14/2026 | SeverityMedium |
|---|
CVE-2026-16190IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities | Exploitation statusNot exploited | FixYes | Published09/14/2026 | SeverityLow |
|---|
CVE-2026-16189IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities | Exploitation statusNot exploited | FixYes | Published09/14/2026 | SeverityMedium |
|---|
CVE-2026-16188IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities | Exploitation statusNot exploited | FixYes | Published09/14/2026 | SeverityMedium |
|---|
CVE-2026-16187IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities | Exploitation statusNot exploited | FixYes | Published09/14/2026 | SeverityMedium |
|---|
CVE-2026-16186IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities | Exploitation statusNot exploited | FixYes | Published09/14/2026 | SeverityMedium |
|---|
CVE-2026-16185IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities | Exploitation statusNot exploited | FixYes | Published09/14/2026 | SeverityMedium |
|---|
CVE-2026-15887IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities | Exploitation statusNot exploited | FixYes | Published09/14/2026 | SeverityMedium |
|---|
CVE-2026-15634IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities | Exploitation statusNot exploited | FixYes | Published09/14/2026 | SeverityMedium |
|---|
CVE-2026-15412IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities | Exploitation statusNot exploited | FixYes | Published09/14/2026 | SeverityMedium |
|---|
CVE-2026-15396IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities | Exploitation statusNot exploited | FixYes | Published09/14/2026 | SeverityMedium |
|---|
CVE-2026-9667IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities | Exploitation statusNot exploited | FixYes | Published09/10/2026 | SeverityMedium |
|---|
CVE-2026-9338IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities | Exploitation statusNot exploited | FixYes | Published09/10/2026 | SeverityMedium |
|---|
CVE-2026-9336IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities | Exploitation statusNot exploited | FixYes | Published09/10/2026 | SeverityMedium |
|---|
CVE-2026-9327IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities | Exploitation statusNot exploited | FixYes | Published09/10/2026 | SeverityMedium |
|---|
CVE-2026-9176IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities | Exploitation statusNot exploited | FixYes | Published09/10/2026 | SeverityMedium |
|---|
CVE-2026-8400Multiple Vulnerabilities in IBM® Java SDK affect IBM WebSphere Application Server and WebSphere Application Server Liberty due to the July 2026 CPU | Exploitation statusNot exploited | FixYes | Published08/05/2026 | SeverityHigh |
|---|
CVE-2026-9322IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities | Exploitation statusNot exploited | FixYes | Published07/30/2026 | SeverityHigh |
|---|
CVE-2026-11536IBM WebSphere Application Server is affected by a remote code execution vulnerability | Exploitation statusNot exploited | FixYes | Published07/30/2026 | SeverityHigh |
|---|
CVE-2026-10842IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a security bypass vulnerability | Exploitation statusNot exploited | FixYes | Published07/30/2026 | SeverityHigh |
|---|
CVE-2026-14529IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a server-side request forgery | Exploitation statusNot exploited | FixYes | Published07/29/2026 | SeverityCritical |
|---|
CVE-2026-16184IBM WebSphere Application Server is affected by an authentication bypass | Exploitation statusNot exploited | FixYes | Published07/28/2026 | SeverityHigh |
|---|
CVE-2026-15328IBM WebSphere Application Server and WebSphere Application Server Liberty is inconsistent Interpretation of HTTP Requests | Exploitation statusNot exploited | FixYes | Published07/28/2026 | SeverityHigh |
|---|
CVE-2026-15325IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities | Exploitation statusNot exploited | FixYes | Published07/28/2026 | SeverityHigh |
|---|
CVE-2026-15064IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities | Exploitation statusNot exploited | FixYes | Published07/28/2026 | SeverityHigh |
|---|
CVE-2026-14981IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities | Exploitation statusNot exploited | FixYes | Published07/28/2026 | SeverityHigh |
|---|
CVE-2026-14974IBM WebSphere Application Server is affected by cross-site scripting and deserialization vulnerabilities | Exploitation statusNot exploited | FixYes | Published07/28/2026 | SeverityHigh |
|---|
CVE-2026-14528IBM WebSphere Application Server is affected by an unsafe deserialization and exposure of sensitive information | Exploitation statusNot exploited | FixYes | Published07/28/2026 | SeverityHigh |
|---|
CVE-2026-14515IBM WebSphere Application Server is affected by cross-site scripting and deserialization vulnerabilities | Exploitation statusNot exploited | FixYes | Published07/28/2026 | SeverityMedium |
|---|
CVE-2026-14512Pre-authentication unsafe deserialization in IBM WebSphere Application Server can bypass authentication or execute arbitrary code | Exploitation statusNot exploited | FixYes | Published07/28/2026 | SeverityCritical |
|---|
CVE-2026-14446IBM WebSphere Application Server is affected by a privilege escalation | Exploitation statusNot exploited | FixYes | Published07/28/2026 | SeverityCritical |
|---|
CVE-2026-11712IBM WebSphere Application Server is affected by a cross-site scripting vulnerability | Exploitation statusNot exploited | FixYes | Published06/30/2026 | SeverityCritical |
|---|
CVE-2026-11708IBM WebSphere Application Server is affected by a cross-site scripting vulnerability | Exploitation statusNot exploited | FixYes | Published06/30/2026 | SeverityCritical |
|---|
CVE-2026-11595IBM WebSphere Application Server is affected by a Path Traversal vulnerability | Exploitation statusNot exploited | FixYes | Published06/30/2026 | SeverityMedium |
|---|
184 Results | Page 1 of 4