WebSphere Application Server Liberty
IBM
- Product type
- Other
- Catalog vulnerabilities
- 30
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Severity across 30 analyzed records
Verify to analyze this security profile
As of 09/14/2026, within CyStack's analyzed data, WebSphere Application Server Liberty has 0 security vulnerabilities published in the last 90 days. Of these, 0 are rated High or Critical. None of these vulnerabilities is listed in the CISA KEV catalog. CyStack recommends that organizations and individual users remediate applicable vulnerabilities as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of WebSphere Application Server Liberty and determine which vulnerabilities affect that version.
| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-1561IBM WebSphere Application Server Liberty Server-Side Request Forgery | Exploitation statusNot known exploited | FixYes | Published03/25/2026 | SeverityMedium |
CVE-2025-14914IBM WebSphere Application Server Liberty Path Traversal | Exploitation statusNot known exploited | FixYes | Published02/02/2026 | SeverityHigh |
CVE-2025-12635IBM WebSphere Application Server and WebSphere Application Server Liberty Cross-Site Scripting | Exploitation statusNot known exploited | FixYes | Published12/08/2025 | SeverityMedium |
CVE-2025-36047IBM WebSphere Application Server Liberty denial of service | Exploitation statusNot known exploited | FixYes | Published08/14/2025 | SeverityMedium |
CVE-2025-36000IBM WebSphere Application Server Liberty cross-site scripting | Exploitation statusNot known exploited | FixYes | Published08/12/2025 | SeverityMedium |
CVE-2025-36124IBM WebSphere Application Server Liberty bypass security | Exploitation statusNot known exploited | FixYes | Published08/12/2025 | SeverityMedium |
CVE-2024-56339IBM WebSphere Application Server information disclosure | Exploitation statusNot known exploited | FixYes | Published08/07/2025 | SeverityLow |
CVE-2025-36097IBM WebSphere Application Server denial of service | Exploitation statusNot known exploited | FixYes | Published07/16/2025 | SeverityHigh |
CVE-2024-25026IBM WebSphere Application Server denial of service | Exploitation statusNot known exploited | FixYes | Published04/25/2024 | SeverityMedium |
CVE-2024-22329IBM WebSphere Application Server server-side request forgery | Exploitation statusNot known exploited | FixYes | Published04/17/2024 | SeverityMedium |
CVE-2024-22354IBM WebSphere Application Server XML external entity injection | Exploitation statusNot known exploited | FixYes | Published04/17/2024 | SeverityHigh |
CVE-2024-27268IBM WebSphere Application Server Liberty denial of service | Exploitation statusNot known exploited | FixYes | Published04/04/2024 | SeverityMedium |
CVE-2024-22353IBM WebSphere Application Server Liberty denial of service | Exploitation statusNot known exploited | FixYes | Published03/31/2024 | SeverityMedium |
CVE-2024-27270IBM WebSphere Application Server Liberty cross-site scripting | Exploitation statusNot known exploited | FixYes | Published03/27/2024 | SeverityMedium |
CVE-2023-50312IBM WebSphere Application Server Liberty information disclosure | Exploitation statusNot known exploited | FixYes | Published03/01/2024 | SeverityMedium |
CVE-2023-46158IBM WebSphere Application Server session fixation | Exploitation statusNot known exploited | FixNot confirmed | Published10/25/2023 | SeverityMedium |
CVE-2023-38737IBM WebSphere Application Server Liberty denial of service | Exploitation statusNot known exploited | FixYes | Published08/16/2023 | SeverityMedium |
CVE-2022-34165 | Exploitation statusNot confirmed | FixNot confirmed | Published09/09/2022 | SeverityMedium |
CVE-2022-22476 | Exploitation statusNot confirmed | FixNot confirmed | Published07/08/2022 | SeverityMedium |
CVE-2022-22475 | Exploitation statusNot confirmed | FixNot confirmed | Published05/17/2022 | SeverityMedium |
CVE-2022-22393 | Exploitation statusNot confirmed | FixNot confirmed | Published05/13/2022 | SeverityLow |
CVE-2021-39038 | Exploitation statusNot confirmed | FixNot confirmed | Published02/24/2022 | SeverityMedium |
CVE-2021-39031 | Exploitation statusNot confirmed | FixNot confirmed | Published01/25/2022 | SeverityHigh |
CVE-2022-22310 | Exploitation statusNot confirmed | FixNot confirmed | Published01/19/2022 | SeverityMedium |
CVE-2021-29842 | Exploitation statusNot confirmed | FixNot confirmed | Published09/16/2021 | SeverityLow |
CVE-2020-4590 | Exploitation statusNot confirmed | FixNot confirmed | Published09/21/2020 | SeverityMedium |
CVE-2020-4421 | Exploitation statusNot confirmed | FixNot confirmed | Published05/06/2020 | SeverityMedium |
CVE-2020-4329 | Exploitation statusNot confirmed | FixNot confirmed | Published04/28/2020 | SeverityMedium |
CVE-2020-4304 | Exploitation statusNot confirmed | FixNot confirmed | Published04/02/2020 | SeverityMedium |
CVE-2020-4303 | Exploitation statusNot confirmed | FixNot confirmed | Published04/02/2020 | SeverityMedium |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
