Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (958 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-9338 1 Ibm 1 Websphere Application Server 2026-09-16 5.3 Medium
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to trigger excessive resource consumption, potentially leading to reduced availability of the affected service.
CVE-2026-15887 1 Ibm 1 Websphere Application Server 2026-09-15 5.4 Medium
IBM WebSphere Application Server 9.0, and 8.5 is affected by blind server-side request forgery when processing SOAP requests.
CVE-2026-16435 1 Ibm 1 Websphere Application Server 2026-09-15 5.9 Medium
IBM WebSphere Application Server 9.0, and 8.5 is affected by an authentication bypass vulnerability when using XD or Intelligent-Management features.
CVE-2026-16189 1 Ibm 1 Websphere Application Server 2026-09-15 4.8 Medium
IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to inject forged log entries into the server's administrative log.
CVE-2026-16190 1 Ibm 1 Websphere Application Server 2026-09-15 3.1 Low
IBM WebSphere Application Server 9.0, and 8.5 is affected by an authorization bypass vulnerability.
CVE-2026-9176 1 Ibm 1 Websphere Application Server 2026-09-15 6.7 Medium
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to a security bypass due to improper authentication controls. A local attacker could exploit this vulnerability to escalate privileges and gain unauthorized access to protected resources.
CVE-2026-9327 1 Ibm 1 Websphere Application Server 2026-09-15 6.3 Medium
IBM WebSphere Application Server 9.0, and 8.5 could allow an authenticated user with a low-privilege administrative role to modify security configuration. This could result in information disclosure or denial of service.
CVE-2026-9667 1 Ibm 1 Websphere Application Server 2026-09-15 5.3 Medium
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to server-side request forgery (SSRF) that could allow a remote, unauthenticated attacker to cause the server to send outbound requests to arbitrary endpoints.
CVE-2026-16186 1 Ibm 1 Websphere Application Server 2026-09-15 5.4 Medium
IBM WebSphere Application Server 9.0, and 8.5 is affected by a reflected cross-site scripting vulnerability.
CVE-2026-16188 1 Ibm 1 Websphere Application Server 2026-09-14 5.3 Medium
IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to inject forged log entries into the server's administrative log.
CVE-2026-16187 1 Ibm 1 Websphere Application Server 2026-09-14 6.5 Medium
IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to bypass authentication and obtain sensitive information by sending a crafted unauthenticated request.
CVE-2026-16185 1 Ibm 1 Websphere Application Server 2026-09-14 6.4 Medium
IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to bypass authentication on an admin console servlet.
CVE-2026-11383 3 Ibm, Linux, Microsoft 7 Aix, I, Tivoli System Automation Application Manager and 4 more 2026-08-18 5.4 Medium
IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by cross-site scripting in the Administrative Console.
CVE-2026-11707 3 Ibm, Linux, Microsoft 7 Aix, I, Tivoli System Automation Application Manager and 4 more 2026-08-18 9.3 Critical
IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by a cross-site scripting vulnerability in the administrative console login page.
CVE-2026-10571 4 Apple, Ibm, Linux and 1 more 9 Macos, Aix, I and 6 more 2026-08-17 5.7 Medium
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of service caused by insecure deserialization. A low-privileged, administrative user could exploit this vulnerability to consume system resources when the restConnector-2.0 feature is enabled.
CVE-2026-14525 4 Apple, Ibm, Linux and 1 more 8 Macos, Aix, I and 5 more 2026-08-17 9.4 Critical
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 IBM WebSphere Application Server Liberty is vulnerable to an authentication bypass when the rtcomm-1.0 or rtcommGateway-1.0 feature is enabled.
CVE-2026-18499 1 Ibm 2 Websphere Application Server, Websphere Application Server Liberty 2026-08-17 8.1 High
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to a privilege escalation when using Liberty collectives.
CVE-2026-9322 1 Ibm 2 Websphere Application Server, Websphere Application Server Liberty 2026-08-12 7.5 High
IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 are vulnerable to a denial of service via a crafted HTTP request.
CVE-2026-15325 1 Ibm 2 Websphere Application Server, Websphere Application Server Liberty 2026-08-06 8.7 High
IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty is vulnerable to HTTP request smuggling due to improper handling of TRACE requests.
CVE-2026-11714 1 Ibm 2 Websphere Application Server, Websphere Application Server Liberty 2026-08-06 8.5 High
IBM WebSphere Application Server Liberty is affected by a server-side request forgery vulnerability with the apiDiscovery-1.0 feature enabled.