Riskcovery

CVE-2026-9320

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities

State
Published
Severity
5.9 Medium
Published
Jun 22, 2026
Updated
Jun 22, 2026
Reserved
May 22, 2026

Read the record on cve.org

Description

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources.

Scores

CVSSScoreVectorSource
3.15.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:Hibm

Weaknesses

  • CWE-400 Uncontrolled Resource Consumption

Affected Products

ProductVersions
WebSphere Application ServerIBM
  • 9.0.0 through 7.0.2 Interim Fix 035Affected
  • 8.5.0 through 7.0.3 Interim Fix 017Affected
WebSphere Application Server - LibertyIBM
  • 17.0.0.3 through 26.0.0.6Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.