WA
Product
WebSphere Application Server Liberty
59
CVEs
0
On KEV
9.8
Max CVSS
14
New 30D
Severity mix
Critical 13High 27Medium 19Low 0
Watch
Add WebSphere Application Server Liberty to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-3621 | 5.9 | Apr 22 | IBM WebSphere Application Server Liberty is affected by identity spoofing Affected: 17.0.0.3 through 26.0.0.4 |
| CVE-2026-79715 | 5.5 | Oct 13 | IBM WebSphere Application Server Liberty Path Traversal Affected: 17.0.0.3 through 26.0.0.9 |
| CVE-2026-11713 | 5.4 | Oct 13 | IBM WebSphere Application Server Liberty Incorrect Authorization Affected: 17.0.0.3 through 26.0.0.9 |
| CVE-2026-10571 | 5.3 | Aug 13 | IBM WebSphere Application Server Liberty is affected by a denial of service Affected: 17.0.0.3 through 26.0.0.8 |
| CVE-2026-11722 | 4.8 | Sep 18 | IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty HTTP Request Smuggling Affected: 17.0.0.3 through 26.0.0.5 |
| CVE-2026-11548 | 4.8 | Sep 18 | IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty HTTP Request Smuggling Affected: 17.0.0.3 through 26.0.0.5 |
| CVE-2026-10841 | 4.8 | Sep 18 | IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty HTTP Request Smuggling Affected: 17.0.0.3 through 26.0.0.5 |
| CVE-2026-14532 | 4.3 | Oct 13 | IBM WebSphere Application Server Liberty Integer Overflow Affected: 17.0.0.3 through 26.0.0.9 |
| CVE-2024-22329 | 4.3 | Apr 17 | IBM WebSphere Application Server server-side request forgery Affected: 17.0.0.3 through 24.0.0.3 |