Authors: Created by IBM

IBM WebSphere Application Server Liberty is affected by a denial of service with the jsonp-2.1 feature enabled. CVEID:  CVE-2026-9563^[1]
DESCRIPTION:  In Eclipse Parsson published Maven Central artifacts before version 1.1.8, the JSON parser did not enforce a default maximum on the number of characters consumed while parsing a single JSON document.Applications that parse attacker- controlled JSON can be forced to consume excessive CPU and memory...

Just published by IBM: Read more

Authors: Created by IBM

IBM WebSphere Application Server is affected by a cross-site request forgery vulnerability when using the Administrative Console. CVEID:  CVE-2026-8408^[1]
DESCRIPTION:  IBM WebSphere Application Server is affected by a cross-site request forgery, caused by improper validation of user-supplied input to the Administrative Console.By persuading an authenticated, privileged user to visit a malicious URL during a limited timing window, a remote attacker could send a specially-crafted request...

Just published by IBM: Read more

Authors: Created by IBM

IBM WebSphere Application Server is affected by a remote code execution vulnerability when using JAX-WS endpoints with WS-Security. CVEID:  CVE-2026-9319^[1]
DESCRIPTION:  IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to potential remote code execution due to deserialization of untrusted data via JAX-WS endpoints with WS-Security.
CWE:  CWE-502:Deserialization of Untrusted Data^[2]
...

Just published by IBM: Read more

Authors: Created by IBM

IBM WebSphere Application Server is affected by a server-side request forgery vulnerability with the Ajax Proxy configured. CVEID:  CVE-2026-9006^[1]
DESCRIPTION:  IBM WebSphere Application Server is vulnerable to server-side request forgery (SSRF) with the Ajax Proxy configured.This may allow an attacker to send unauthorized requests from the system, resulting in a security bypass or information disclosure.
CWE:  CWE-918:Server-Side Request Forgery ...

Just published by IBM: Read more

Authors: Created by IBM

File link File size File description      ...

Just published by IBM: Read more