Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Advisory: IBM WebSphere Application Server - Liberty — ibm.com/support/pages/node/7291394 Clear all filters
TI-2026-73460 CVE-2026-11713 · GHSA-wp7q-jrp6-gm2m

Incorrect authorization in IBM WebSphere Application Server Liberty

Priority LOW 24

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by a privilege escalation vulnerability with the restConnector-2.0 feature enabled.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00182 Published 2026-10-13 No fix listed CWE-863
TI-2026-73461 CVE-2026-14532 · GHSA-3257-m328-3cx2

Integer overflow in IBM WebSphere Liberty causes uncaught exception

Priority LOW 19

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a Reader-role attacker to obtain version information that causes an uncaught exception.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00215 Published 2026-10-13 No fix listed CWE-190
TI-2026-73462 CVE-2026-14909 · GHSA-w359-m8h5-3c98

Information disclosure in IBM WebSphere Application Server Liberty

Priority LOW 29

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by an information disclosure vulnerability that allows an authenticated attacker to obtain sensitive information when restConnector-2.0 is…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00287 Published 2026-10-13 No fix listed CWE-209
TI-2026-73509 CVE-2026-79715 · GHSA-7f6g-4h8g-5rpq

Path traversal in IBM WebSphere Application Server Liberty

Priority LOW 24

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a local attacker to traverse directories on the system.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00139 Published 2026-10-13 No fix listed CWE-22