Websphere application server

This hub aggregates every CVE we track for Websphere application server, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Websphere application server.

• CVE-2026-8400Multiple Vulnerabilities in IBM® Java SDK affect IBM WebSphere Application Server and WebSphere Application Server Liberty due to the July 2026 CPU8.1Aug 5, 2026
• CVE-2026-11536IBM WebSphere Application Server is affected by a remote code execution vulnerability8.5Jul 30, 2026
• CVE-2026-9322IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities7.5Jul 30, 2026
• CVE-2026-10842IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a security bypass vulnerability7.5Jul 30, 2026
• CVE-2026-11897IBM WebSphere Application Server Liberty is affected by a denial of service vulnerability with HTTP/27.5Jul 30, 2026
• CVE-2026-14980IBM WebSphere Application Server Liberty is affected by a cross-site request forgery8.3Jul 30, 2026
• CVE-2026-2482IBM WebSphere Application Server Liberty is affected by a cross-site request forgery3.1Jul 29, 2026
• CVE-2026-14529IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a server-side request forgery9.4Jul 29, 2026
• CVE-2026-14446IBM WebSphere Application Server is affected by a privilege escalation9.8Jul 28, 2026
• CVE-2026-14515IBM WebSphere Application Server is affected by cross-site scripting and deserialization vulnerabilities6.1Jul 28, 2026
• CVE-2026-14512IBM WebSphere Application Server is affected by an unsafe deserialization and exposure of sensitive information9.8Jul 28, 2026
• CVE-2026-14528IBM WebSphere Application Server is affected by an unsafe deserialization and exposure of sensitive information7.4Jul 28, 2026
• CVE-2026-14974IBM WebSphere Application Server is affected by cross-site scripting and deserialization vulnerabilities8.1Jul 28, 2026
• CVE-2026-14976IBM WebSphere Application Server Liberty is affected by a remote code execution and path-segment injection vulnerability7.1Jul 28, 2026
• CVE-2026-14981IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities7.5Jul 28, 2026