CVE Tools
Track your stack

Websphere Application Server

543 CVEs tracked. 1 of them are in CISA KEV.

This hub aggregates every CVE we track for Websphere Application Server, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.

Websphere Application Server CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Websphere Application Server CVEs per month
MonthCVEs
2024-120
2025-010
2025-020
2025-030
2025-041
2025-051
2025-061
2025-071
2025-085
2025-091
2025-100
2025-110
2025-121
2026-010
2026-022
2026-034
2026-041
2026-054
2026-0620
2026-0723
2026-084
2026-0927
2026-1010
2026-110

Severity

How the 543 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical5710%
  • High11822%
  • Medium32159%
  • Low479%

Latest CVEs

The 15 most recently published vulnerabilities affecting Websphere Application Server.

  1. CVE-2026-93905IBM WebSphere Application Server Liberty is affected by a deserialization of untrusted data8.2
  2. CVE-2026-93909IBM WebSphere Application Server Liberty is affected by an authentication bypass9.1
  3. CVE-2026-93895IBM WebSphere Application Server Liberty Improper Access Control9.1
  4. CVE-2026-95695IBM WebSphere Application Server Liberty Incorrect Authorization7.4
  5. CVE-2026-95696IBM WebSphere Application Server Liberty Denial of Service6.5
  6. CVE-2026-101294IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a missing cryptographic step8.7
  7. CVE-2026-105442IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a deserialization of untrusted data7.5
  8. CVE-2026-93907IBM WebSphere Application Server is affected by a bypass authentication vulnerability8.1
  9. CVE-2026-95680IBM WebSphere Application Server is affected by an authorization bypass8.0
  10. CVE-2026-103499IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service7.5
  11. CVE-2026-11722IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty HTTP Request Smuggling4.8
  12. CVE-2026-11711IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities6.5
  13. CVE-2026-11710IBM WebSphere Application Server is affected by an HTTP request smuggling vulnerability6.5
  14. CVE-2026-11549IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty Improper Access Control6.5
  15. CVE-2026-11548IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty HTTP Request Smuggling4.8

Product grouping is registry-driven, with AI assist and human review. How it works