Websphere application server

This hub aggregates every CVE we track for Websphere application server, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Websphere application server.

• CVE-2026-9320IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities5.9Jun 22, 2026
• CVE-2026-9071IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by Uncontrolled Resource Consumption7.5Jun 22, 2026
• CVE-2026-9006IBM WebSphere Application Server is affected by server-side request forgery7.4Jun 22, 2026
• CVE-2026-8646IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities7.4Jun 22, 2026
• CVE-2026-10845IBM WebSphere Application Server is affected by an authentication bypass vulnerability7.3Jun 22, 2026
• CVE-2026-9330IBM WebSphere Application Server is affected by remote code execution8.5Jun 1, 2026
• CVE-2026-9319IBM WebSphere Application Server is affected by a remote code execution vulnerability9.0Jun 1, 2026
• CVE-2026-9311IBM WebSphere Application Server is affected by remote code execution9.0Jun 1, 2026
• CVE-2026-8644IBM WebSphere Application Server is affected by an identity spoofing vulnerability9.1Jun 1, 2026
• CVE-2026-5516IBM WebSphere Application Server Liberty is affected by a security bypass vulnerability4.4May 27, 2026
• CVE-2026-4410IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service4.8May 27, 2026
• CVE-2026-8633IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities when using when using Web Server Plug-ins9.8May 26, 2026
• CVE-2026-8620IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities when using when using Web Server Plug-ins7.5May 26, 2026
• CVE-2026-3621IBM WebSphere Application Server Liberty is affected by identity spoofing7.5Apr 22, 2026
• CVE-2025-14917IBM WebSphere Application Server Liberty could provide weaker than expected security6.7Mar 25, 2026