Authors: Created by IBM


IBM WebSphere Application Server Liberty Fix pack 25.0.0.5 for all platforms.

Notice: Read the important information included in this document in the Known side effects[1] section and Regression List[2] for changes with negative effects.

WebSphere Application Server Liberty 25.0.0.5 content on Fix Central is provided:...

    Just published by IBM: Read more

    Authors: Created by IBM


    There are multiple vulnerabilities in the IBM® SDK, Java™ Technology Edition that is shipped with IBM WebSphere Application Server and IBM WebSphere Application Server Liberty.The CVE(s) listed in this document might affect some configurations of IBM WebSphere Application Server traditional and IBM WebSphere Application Server Liberty.If you run your own Java code using the IBM Java Runtime delivered with this product, you should evaluate your code to determine whether the complete list of vulnerabilities is applicable to your code.For a...

    Just published by IBM: Read more

    Authors: Created by IBM


    IBM WebSphere Application Server is affected by a cross-site scripting vulnerability. CVEID:  CVE-2025-33104[1]
    DESCRIPTION:  IBM WebSphere Application Server is vulnerable to cross-site scripting.This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
    CWE:      CWE-79:Improper Neutralization of Input During Web Page Generation ('Cross-site ...

    Just published by IBM: Read more

    Authors: Created by IBM


    IBM WebSphere Application Server is affected by a cross-site scripting vulnerability. CVEID:  CVE-2025-33104[1]
    DESCRIPTION:  IBM WebSphere Application Server is vulnerable to cross-site scripting.This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
    CWE:      CWE-79:Improper Neutralization of Input During Web Page Generation ('Cross-site ...

    Just published by IBM: Read more

    Weitere Beiträge ...

    1. THE MORE TRANSACTION SERVICE CONFIGURATION ATTRIBUTE FOR OPTION PROPAGATE XA RESOURCE TRANSACTION TIMEOUT IS INCORRECT.
    2. ENSURE EMBEDDED EXPAT LIBRARY IS ALWAYS USED WITH AN ENTITY HANDLER.
    3. Problem creating standby deployment manager node level ManagementScope
    4. PH60199:IBM WebSphere Application Server Liberty is vulnerable to a denial of service due to jose4j (CVE-2023-51775 CVSS 7.5)

    Seite 2 von 51