wid-sec-w-2026-2001 · Published 2026-06-17 · View on BSI CERT-Bund ↗

IBM WebSphere Application Server: Multiple Vulnerabilities

CVSS N/A NONE

Risk Summary

Ein Angreifer kann mehrere Schwachstellen in IBM WebSphere Application Server ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, und um seine Privilegien zu erhöhen.

CVEs (8)

CVE-2026-10845 CVE-2026-10852 CVE-2026-8646 CVE-2026-8858 CVE-2026-9006 CVE-2026-9071 CVE-2026-9072 CVE-2026-9320

Affected Vendors

IBM

Affected Products (20)

IBM · WebSphere Application Server <9.0.5.28

IBM · WebSphere Application Server 9.0.5.28

IBM · WebSphere Application Server <9.0.5.28 PH71556

IBM · WebSphere Application Server 9.0.5.28 PH71556

IBM · WebSphere Application Server <9.0.5.28 PH71370

IBM · WebSphere Application Server 9.0.5.28 PH71370

IBM · WebSphere Application Server <9.0.5.28 PH71648

IBM · WebSphere Application Server 9.0.5.28 PH71648

IBM · WebSphere Application Server <9.0.5.29

IBM · WebSphere Application Server 9.0.5.29

IBM · WebSphere Application Server <8.5.5.30

IBM · WebSphere Application Server 8.5.5.30

IBM · WebSphere Application Server <8.5.5.29 PH71376

IBM · WebSphere Application Server 8.5.5.29 PH71376

IBM · WebSphere Application Server <8.5.5.29 PH71556

IBM · WebSphere Application Server 8.5.5.29 PH71556

IBM · WebSphere Application Server <8.5.5.29 PH71370

IBM · WebSphere Application Server 8.5.5.29 PH71370

IBM · WebSphere Application Server <8.5.5.29 PH71648

IBM · WebSphere Application Server 8.5.5.29 PH71648

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more