Vulnerabilities

TI-2026-10013 CVE-2026-11595 · GHSA-4qvc-jg4j-cv44

IBM WebSphere Application Server is affected by a Path Traversal vulnerability

LOW 34

IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to obtain sensitive information from the administrative console's integrated help system.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0078 Published 2026-06-30 No fix listed CWE-22

TI-2026-10115 CVE-2026-11708 · GHSA-6r45-rmg6-v6j9

IBM WebSphere Application Server is affected by a cross-site scripting vulnerability

MEDIUM 42

IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the administrative console's integrated help system.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00384 Published 2026-06-30 No fix listed CWE-79

TI-2026-10118 CVE-2026-11712 · GHSA-r8wf-c575-w3gq

IBM WebSphere Application Server is affected by a cross-site scripting vulnerability

MEDIUM 42

IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the administrative console help system.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00384 Published 2026-06-30 No fix listed CWE-79

Vulnerabilities

Filters

IBM WebSphere Application Server is affected by a Path Traversal vulnerability

IBM WebSphere Application Server is affected by a cross-site scripting vulnerability

IBM WebSphere Application Server is affected by a cross-site scripting vulnerability