Login Request a demo
WE
Product
WebSphere Extreme Scale
by IBM · last CVE Jun 30, 2026
23
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities23In the news0Timeline
Severity mix
Critical 2High 1Medium 7Low 2
Severity
All severities23Critical2High1Medium7Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add WebSphere Extreme Scale to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-9002
6.5
0%
Jun 30
IBM WebSphere eXtremes Scale is affected by uncontrolled resource consumption when XDF is enabled
Affected: 8.6.1.0 through 8.6.1.6
CVE-2019-4109
6.1
1%
Sep 30
IBM WebSphere eXtreme Scale 8.6 Admin Console could allow a remote attacker to hijack the clicking action of the victim
Affected: 8.6.0 before 8.6.1.3
CVE-2016-0400
6.1
2%
Jul 2
CRLF injection vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3, 7.1.1 before 7.1.1.1, 8.5 before 8.5.0.3, and 8.6 before 8.6.0.8 allows remote attackers to…
Affected: 7.1.0; 7.1.0.2; 7.1.1; 8.5.0; 8.5.0.1; 8.5.0.2; +8 more
CVE-2019-4115
5.4
1%
Sep 30
IBM WebSphere eXtreme Scale 8.6 Admin API is vulnerable to cross-site scripting
Affected: 8.6.0 before 8.6.1.3
CVE-2020-4336
5.3
1%
Jan 6
IBM WebSphere eXtreme Scale 8.6.1 stores sensitive information in URL parameters
Affected: 8.6.1.0 before 8.6.1.4
CVE-2019-4106
4.8
1%
Sep 30
IBM WebSphere eXtreme Scale 8.6 Admin Console is vulnerable to cross-site scripting
Affected: 8.6.0 before 8.6.1.3
CVE-2015-7418
4.4
0%
Feb 8
IBM WebSphere eXtreme Scale and the WebSphere DataPower XC10 Appliance allow some sensitive data to linger in memory instead of being overwritten which could allow a local user…
Affected: 7.1.0; 7.1.1; 8.5; 8.6
Showing 7