Vulnerabilities

TI-2026-12255 CVE-2026-14515 · GHSA-83wp-8xg5-qprx

IBM WebSphere Application Server is affected by cross-site scripting and deserialization vulnerabilities

LOW 27

IBM WebSphere Application Server 8.5, and 9.0 traditional could allow a remote attacker to conduct a cross-site scripting attack.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00302 Published 2026-07-28 No fix listed CWE-79

TI-2026-12607 CVE-2026-14974 · GHSA-3943-mgp9-h6fv

IBM WebSphere Application Server is affected by cross-site scripting and deserialization vulnerabilities

MEDIUM 44

IBM WebSphere Application Server 8.5, and 9.0 traditional could allow a remote attacker to execute arbitrary code caused by unsafe deserialization of untrusted data.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0068 Published 2026-07-28 No fix listed CWE-502

Vulnerabilities

Filters

IBM WebSphere Application Server is affected by cross-site scripting and deserialization vulnerabilities

IBM WebSphere Application Server is affected by cross-site scripting and deserialization vulnerabilities