IBM WebSphere Application Server vulnerabilities

184 published CVEs name IBM WebSphere Application Server among the affected products.

Atom feed of new CVEs

184Published CVEs184 of them scored
66Last 12 monthspublished in the last year
13Critical48 more rated high
0Known exploitedin CISA's KEV catalog

Newest CVEs

CVE-2026-101294
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a missing cryptographic step
IBM · WebSphere Application Server - Liberty
High8.7
CVE-2026-105442
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a deserialization of untrusted data
IBM · WebSphere Application Server
High7.5
CVE-2026-93907
IBM WebSphere Application Server is affected by a bypass authentication vulnerability
IBM · WebSphere Application Server
High8.1
CVE-2026-95680
IBM WebSphere Application Server is affected by an authorization bypass
IBM · WebSphere Application Server
High8.0
CVE-2026-103499
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service
IBM · WebSphere Application Server - Liberty
High7.5
CVE-2026-11722
IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty HTTP Request Smuggling
IBM · WebSphere Application Server
Medium4.8
CVE-2026-11711
IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities
IBM · WebSphere Application Server
Medium6.5
CVE-2026-11710
IBM WebSphere Application Server is affected by an HTTP request smuggling vulnerability
IBM · WebSphere Application Server
Medium6.5
CVE-2026-11549
IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty Improper Access Control
IBM · WebSphere Application Server
Medium6.5
CVE-2026-11548
IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty HTTP Request Smuggling
IBM · WebSphere Application Server
Medium4.8

All 184 in the list