Websphere application server

This hub aggregates every CVE we track for Websphere application server, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Websphere application server.

• CVE-2026-11541IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by HTTP request smuggling7.4Jun 30, 2026
• CVE-2026-11594IBM WebSphere Application Server is affected by multiple cross-site scripting vulnerabilities8.5Jun 30, 2026
• CVE-2026-11595IBM WebSphere Application Server is affected by a Path Traversal vulnerability4.3Jun 30, 2026
• CVE-2026-11708IBM WebSphere Application Server is affected by a cross-site scripting vulnerability9.3Jun 30, 2026
• CVE-2026-11712IBM WebSphere Application Server is affected by a cross-site scripting vulnerability9.3Jun 30, 2026
• CVE-2026-9320IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities5.9Jun 22, 2026
• CVE-2026-9071IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by Uncontrolled Resource Consumption7.5Jun 22, 2026
• CVE-2026-9006IBM WebSphere Application Server is affected by server-side request forgery7.4Jun 22, 2026
• CVE-2026-8646IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities7.4Jun 22, 2026
• CVE-2026-10845IBM WebSphere Application Server is affected by an authentication bypass vulnerability7.3Jun 22, 2026
• CVE-2026-9330IBM WebSphere Application Server is affected by remote code execution8.5Jun 1, 2026
• CVE-2026-9319IBM WebSphere Application Server is affected by a remote code execution vulnerability9.0Jun 1, 2026
• CVE-2026-9311IBM WebSphere Application Server is affected by remote code execution9.0Jun 1, 2026
• CVE-2026-8644IBM WebSphere Application Server is affected by an identity spoofing vulnerability9.1Jun 1, 2026
• CVE-2026-5516IBM WebSphere Application Server Liberty is affected by a security bypass vulnerability4.4May 27, 2026