CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2025-36047 – IBM WebSphere Application Server Liberty denial of service
https://notcve.org/view.php?id=CVE-2025-36047
14 Aug 2025 — IBM WebSphere Application Server Liberty 18.0.0.2 through 25.0.0.8 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. • https://www.ibm.com/support/pages/node/7242086 • CWE-770: Allocation of Resources Without Limits or Throttling •
CVSS: 4.8EPSS: 0%CPEs: 1EXPL: 0CVE-2025-36000 – IBM WebSphere Application Server Liberty cross-site scripting
https://notcve.org/view.php?id=CVE-2025-36000
12 Aug 2025 — IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.8 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. • https://www.ibm.com/support/pages/node/7242026 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2025-36124 – IBM WebSphere Application Server Liberty bypass security
https://notcve.org/view.php?id=CVE-2025-36124
12 Aug 2025 — IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.8 could allow a remote attacker to bypass security restrictions caused by a failure to honor JMS messaging configuration • https://www.ibm.com/support/pages/node/7242027 • CWE-268: Privilege Chaining •
CVSS: 3.7EPSS: 0%CPEs: 1EXPL: 0CVE-2024-56339 – IBM WebSphere Application Server information disclosure
https://notcve.org/view.php?id=CVE-2024-56339
07 Aug 2025 — IBM WebSphere Application Server 9.0 and WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.7 could allow a remote attacker to bypass security restrictions caused by a failure to honor security configuration. IBM WebSphere Application Server 9.0 y WebSphere Application Server Liberty 17.0.0.3 a 25.0.0.7 podrían permitir que un atacante remoto eluda las restricciones de seguridad causadas por un fallo en el respeto de la configuración de seguridad. IBM WebSphere Application Server 9.0 and WebSphere... • https://www.ibm.com/support/pages/node/7239955 • CWE-650: Trusting HTTP Permission Methods on the Server Side •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2025-36097 – IBM WebSphere Application Server denial of service
https://notcve.org/view.php?id=CVE-2025-36097
16 Jul 2025 — IBM WebSphere Application Server 9.0 and WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.7 are vulnerable to a denial of service, caused by a stack-based overflow. An attacker can send a specially crafted request that cause the server to consume excessive memory resources. • https://www.ibm.com/support/pages/node/7239856 • CWE-121: Stack-based Buffer Overflow •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2024-25026 – IBM WebSphere Application Server denial of service
https://notcve.org/view.php?id=CVE-2024-25026
25 Apr 2024 — IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.4 are vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 281516. IBM WebSphere Application Server 8.5, 9.0 e IBM WebSphere Application Server Liberty 17.0.0.3 a 24.0.0.4 son vulnerables a una denegación de servicio provocada por el envío de una solicitud... • https://exchange.xforce.ibmcloud.com/vulnerabilities/281516 • CWE-770: Allocation of Resources Without Limits or Throttling •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0CVE-2024-22329 – IBM WebSphere Application Server server-side request forgery
https://notcve.org/view.php?id=CVE-2024-22329
17 Apr 2024 — IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.3 are vulnerable to server-side request forgery (SSRF). By sending a specially crafted request, an attacker could exploit this vulnerability to conduct the SSRF attack. X-Force ID: 279951. IBM WebSphere Application Server 8.5, 9.0 e IBM WebSphere Application Server Liberty 17.0.0.3 a 24.0.0.3 son vulnerables a server-side request forgery (SSRF). Al enviar una solicitud especialmente manipulada, un ... • https://exchange.xforce.ibmcloud.com/vulnerabilities/279951 • CWE-918: Server-Side Request Forgery (SSRF) •
CVSS: 7.0EPSS: 0%CPEs: 1EXPL: 0CVE-2024-22354 – IBM WebSphere Application Server XML external entity injection
https://notcve.org/view.php?id=CVE-2024-22354
17 Apr 2024 — IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.5 are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information, consume memory resources, or to conduct a server-side request forgery attack. IBM X-Force ID: 280401. IBM WebSphere Application Server 8.5, 9.0 e IBM WebSphere Application Server Liberty 17.0.0.3 a 24.0.0.3 son vulnerables a ... • https://exchange.xforce.ibmcloud.com/vulnerabilities/280401 • CWE-611: Improper Restriction of XML External Entity Reference •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2024-27268 – IBM WebSphere Application Server Liberty denial of service
https://notcve.org/view.php?id=CVE-2024-27268
04 Apr 2024 — IBM WebSphere Application Server Liberty 18.0.0.2 through 24.0.0.4 is vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 284574. IBM WebSphere Application Server Liberty 18.0.0.2 a 24.0.0.3 es vulnerable a una denegación de servicio provocada por el envío de una solicitud especialmente manipulada. Un atacante remoto podría aprovechar esta vulnerabilidad para hace... • https://exchange.xforce.ibmcloud.com/vulnerabilities/284574 • CWE-770: Allocation of Resources Without Limits or Throttling •
CVSS: 4.7EPSS: 0%CPEs: 1EXPL: 0CVE-2024-27270 – IBM WebSphere Application Server Liberty cross-site scripting
https://notcve.org/view.php?id=CVE-2024-27270
27 Mar 2024 — IBM WebSphere Application Server Liberty 23.0.0.3 through 24.0.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in a specially crafted URI. IBM X-Force ID: 284576. IBM WebSphere Application Server Liberty 23.0.0.3 a 24.0.0.3 es vulnerable a cross-site scripting. Esta vulnerabilidad permite a los usuarios incrustar código JavaScript arbitrario en un URI especialmente manipulado. • https://exchange.xforce.ibmcloud.com/vulnerabilities/284576 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •