Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
Related vulnerabilities
CERTFR-2026-AVI-0810
Vulnerability from certfr_avis - Published: 2026-06-26 - Updated: 2026-06-26
De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| IBM | Sterling Partner Engagement Manager Essentials Edition | Sterling Partner Engagement Manager versions 6.2.3.x antérieures à 6.2.3.6 | ||
| IBM | Sterling | Sterling Secure Proxy versions 6.1.0.x antérieures à 6.1.0.4 iFix01 | ||
| IBM | N/A | WebSphere Application Server sans le dernier correctif de sécurité | ||
| IBM | Sterling | Sterling Order Management sans le dernier correctif de sécurité | ||
| IBM | N/A | WebSphere Remote Server versions 9.0.x antérieures à 9.0.5.29 | ||
| IBM | QRadar | QRadar DNS Analyzer App versions antérieures à 2.0.5 | ||
| IBM | N/A | WebSphere Liberty Operator versions antérieures à 1.6.2 | ||
| IBM | Cloud Pak System | Cloud Pak System versions antérieures à 2.3.5.1 | ||
| IBM | N/A | WebSphere Remote Server versions 8.5.x antérieures à 8.5.5.30 | ||
| IBM | Sterling | Sterling External Authentication Server versions 6.1.1.x antérieures à 6.1.1.3 iFix01 | ||
| IBM | Sterling | Sterling Connect:Direct for Microsoft Windows versions 6.4.0.x antérieures à 6.4.0.4_iFix035 | ||
| IBM | Db2 | Db2 versions V11.5 et V12.1 sans le dernier correctif de sécurité | ||
| IBM | Sterling | Sterling Connect:Direct for Microsoft Windows versions 6.3.0.x antérieures à 6.3.0.6_iFix062 | ||
| IBM | N/A | WebSphere eXtreme Scale versions 8.6.x antérieures à 8.6.1 sans le correctif PH71616 iFix | ||
| IBM | Sterling | Sterling Secure Proxy versions 6.2.1.x antérieures à 6.2.1.2 iFix02 | ||
| IBM | Sterling Partner Engagement Manager Essentials Edition | Sterling Partner Engagement Manager versions 6.2.4.x antérieures à 6.2.4.4 |
References
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Sterling Partner Engagement Manager versions 6.2.3.x ant\u00e9rieures \u00e0 6.2.3.6",
"product": {
"name": "Sterling Partner Engagement Manager Essentials Edition",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "Sterling Secure Proxy versions 6.1.0.x ant\u00e9rieures \u00e0 6.1.0.4 iFix01",
"product": {
"name": "Sterling",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "WebSphere Application Server sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "N/A",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "Sterling Order Management sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "Sterling",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "WebSphere Remote Server versions 9.0.x ant\u00e9rieures \u00e0 9.0.5.29",
"product": {
"name": "N/A",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "QRadar DNS Analyzer App versions ant\u00e9rieures \u00e0 2.0.5",
"product": {
"name": "QRadar",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "WebSphere Liberty Operator versions ant\u00e9rieures \u00e0 1.6.2",
"product": {
"name": "N/A",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "Cloud Pak System versions ant\u00e9rieures \u00e0 2.3.5.1",
"product": {
"name": "Cloud Pak System",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "WebSphere Remote Server versions 8.5.x ant\u00e9rieures \u00e0 8.5.5.30",
"product": {
"name": "N/A",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "Sterling External Authentication Server versions 6.1.1.x ant\u00e9rieures \u00e0 6.1.1.3 iFix01",
"product": {
"name": "Sterling",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "Sterling Connect:Direct for Microsoft Windows versions 6.4.0.x ant\u00e9rieures \u00e0 6.4.0.4_iFix035",
"product": {
"name": "Sterling",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "Db2 versions V11.5 et V12.1 sans le dernier correctif de s\u00e9curit\u00e9",
"product": {
"name": "Db2",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "Sterling Connect:Direct for Microsoft Windows versions 6.3.0.x ant\u00e9rieures \u00e0 6.3.0.6_iFix062",
"product": {
"name": "Sterling",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "WebSphere eXtreme Scale versions 8.6.x ant\u00e9rieures \u00e0 8.6.1 sans le correctif PH71616 iFix",
"product": {
"name": "N/A",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "Sterling Secure Proxy versions 6.2.1.x ant\u00e9rieures \u00e0 6.2.1.2 iFix02",
"product": {
"name": "Sterling",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "Sterling Partner Engagement Manager versions 6.2.4.x ant\u00e9rieures \u00e0 6.2.4.4",
"product": {
"name": "Sterling Partner Engagement Manager Essentials Edition",
"vendor": {
"name": "IBM",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-5588",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5588"
},
{
"name": "CVE-2025-36353",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-36353"
},
{
"name": "CVE-2025-66199",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66199"
},
{
"name": "CVE-2026-33871",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33871"
},
{
"name": "CVE-2025-2534",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-2534"
},
{
"name": "CVE-2026-11383",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11383"
},
{
"name": "CVE-2026-42041",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42041"
},
{
"name": "CVE-2025-13867",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13867"
},
{
"name": "CVE-2026-42402",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42402"
},
{
"name": "CVE-2025-2668",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-2668"
},
{
"name": "CVE-2025-36427",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-36427"
},
{
"name": "CVE-2025-15469",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-15469"
},
{
"name": "CVE-2025-36131",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-36131"
},
{
"name": "CVE-2025-12084",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-12084"
},
{
"name": "CVE-2024-47118",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-47118"
},
{
"name": "CVE-2025-36098",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-36098"
},
{
"name": "CVE-2025-69419",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69419"
},
{
"name": "CVE-2026-33814",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33814"
},
{
"name": "CVE-2025-36184",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-36184"
},
{
"name": "CVE-2026-1605",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-1605"
},
{
"name": "CVE-2026-22013",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22013"
},
{
"name": "CVE-2026-22018",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22018"
},
{
"name": "CVE-2026-42580",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42580"
},
{
"name": "CVE-2025-36247",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-36247"
},
{
"name": "CVE-2025-36009",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-36009"
},
{
"name": "CVE-2025-7962",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-7962"
},
{
"name": "CVE-2025-15467",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-15467"
},
{
"name": "CVE-2026-33870",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33870"
},
{
"name": "CVE-2025-36070",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-36070"
},
{
"name": "CVE-2026-0994",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0994"
},
{
"name": "CVE-2025-36428",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-36428"
},
{
"name": "CVE-2025-41248",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-41248"
},
{
"name": "CVE-2026-42585",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42585"
},
{
"name": "CVE-2026-11541",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11541"
},
{
"name": "CVE-2026-34282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34282"
},
{
"name": "CVE-2026-11707",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11707"
},
{
"name": "CVE-2025-36387",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-36387"
},
{
"name": "CVE-2026-42036",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42036"
},
{
"name": "CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"name": "CVE-2025-58057",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58057"
},
{
"name": "CVE-2026-11594",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11594"
},
{
"name": "CVE-2026-42403",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42403"
},
{
"name": "CVE-2026-22795",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22795"
},
{
"name": "CVE-2026-10109",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-10109"
},
{
"name": "CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"name": "CVE-2023-47038",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-47038"
},
{
"name": "CVE-2025-62718",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-62718"
},
{
"name": "CVE-2025-36136",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-36136"
},
{
"name": "CVE-2026-42584",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42584"
},
{
"name": "CVE-2025-36008",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-36008"
},
{
"name": "CVE-2026-23865",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-23865"
},
{
"name": "CVE-2026-5598",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5598"
},
{
"name": "CVE-2026-42033",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42033"
},
{
"name": "CVE-2026-42035",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42035"
},
{
"name": "CVE-2026-11536",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11536"
},
{
"name": "CVE-2025-69421",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69421"
},
{
"name": "CVE-2026-34478",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34478"
},
{
"name": "CVE-2026-42043",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42043"
},
{
"name": "CVE-2025-11143",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-11143"
},
{
"name": "CVE-2025-36006",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-36006"
},
{
"name": "CVE-2026-6918",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6918"
},
{
"name": "CVE-2026-34480",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34480"
},
{
"name": "CVE-2026-40175",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40175"
},
{
"name": "CVE-2026-5795",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5795"
},
{
"name": "CVE-2025-68161",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68161"
},
{
"name": "CVE-2025-33012",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-33012"
},
{
"name": "CVE-2026-42506",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42506"
},
{
"name": "CVE-2026-34479",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34479"
},
{
"name": "CVE-2026-22796",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22796"
},
{
"name": "CVE-2026-42040",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42040"
},
{
"name": "CVE-2026-1188",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-1188"
},
{
"name": "CVE-2026-25680",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25680"
},
{
"name": "CVE-2025-55163",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-55163"
},
{
"name": "CVE-2022-24729",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24729"
},
{
"name": "CVE-2025-36425",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-36425"
},
{
"name": "CVE-2026-10845",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-10845"
},
{
"name": "CVE-2025-12635",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-12635"
},
{
"name": "CVE-2026-42404",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42404"
},
{
"name": "CVE-2026-40895",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40895"
},
{
"name": "CVE-2026-22016",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22016"
},
{
"name": "CVE-2026-22021",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22021"
},
{
"name": "CVE-2026-22007",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22007"
},
{
"name": "CVE-2025-68160",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68160"
},
{
"name": "CVE-2026-34268",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34268"
},
{
"name": "CVE-2025-67735",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-67735"
},
{
"name": "CVE-2024-29371",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-29371"
},
{
"name": "CVE-2026-42038",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42038"
},
{
"name": "CVE-2026-42583",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42583"
},
{
"name": "CVE-2026-2332",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2332"
},
{
"name": "CVE-2025-36001",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-36001"
},
{
"name": "CVE-2026-42039",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42039"
},
{
"name": "CVE-2025-58056",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58056"
},
{
"name": "CVE-2026-8149",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8149"
},
{
"name": "CVE-2026-42502",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42502"
},
{
"name": "CVE-2026-42581",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42581"
},
{
"name": "CVE-2025-40909",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-40909"
},
{
"name": "CVE-2025-36365",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-36365"
},
{
"name": "CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"name": "CVE-2025-69418",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69418"
},
{
"name": "CVE-2025-15468",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-15468"
},
{
"name": "CVE-2025-36442",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-36442"
},
{
"name": "CVE-2026-42044",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42044"
},
{
"name": "CVE-2026-42034",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42034"
},
{
"name": "CVE-2026-42587",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42587"
},
{
"name": "CVE-2025-48924",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-48924"
},
{
"name": "CVE-2024-47072",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-47072"
},
{
"name": "CVE-2025-11187",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-11187"
},
{
"name": "CVE-2025-41249",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-41249"
},
{
"name": "CVE-2025-36366",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-36366"
},
{
"name": "CVE-2025-36123",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-36123"
},
{
"name": "CVE-2026-42264",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42264"
},
{
"name": "CVE-2026-0636",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0636"
},
{
"name": "CVE-2026-42037",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42037"
},
{
"name": "CVE-2026-42042",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42042"
},
{
"name": "CVE-2026-9006",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9006"
},
{
"name": "CVE-2025-33134",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-33134"
},
{
"name": "CVE-2026-11806",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11806"
},
{
"name": "CVE-2026-34477",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34477"
},
{
"name": "CVE-2025-46392",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-46392"
},
{
"name": "CVE-2025-36407",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-36407"
},
{
"name": "CVE-2026-22008",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22008"
},
{
"name": "CVE-2025-14813",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14813"
},
{
"name": "CVE-2025-69420",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69420"
}
],
"initial_release_date": "2026-06-26T00:00:00",
"last_revision_date": "2026-06-26T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0810",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-06-26T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Falsification de requ\u00eates c\u00f4t\u00e9 serveur (SSRF)"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits IBM. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits IBM",
"vendor_advisories": [
{
"published_at": "2026-06-24",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7277716",
"url": "https://www.ibm.com/support/pages/node/7277716"
},
{
"published_at": "2026-06-24",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7277692",
"url": "https://www.ibm.com/support/pages/node/7277692"
},
{
"published_at": "2026-06-23",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7277418",
"url": "https://www.ibm.com/support/pages/node/7277418"
},
{
"published_at": "2026-06-25",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7275595",
"url": "https://www.ibm.com/support/pages/node/7275595"
},
{
"published_at": "2026-06-25",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7277973",
"url": "https://www.ibm.com/support/pages/node/7277973"
},
{
"published_at": "2026-06-23",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7277546",
"url": "https://www.ibm.com/support/pages/node/7277546"
},
{
"published_at": "2026-06-24",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7277694",
"url": "https://www.ibm.com/support/pages/node/7277694"
},
{
"published_at": "2026-06-23",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7277531",
"url": "https://www.ibm.com/support/pages/node/7277531"
},
{
"published_at": "2026-06-24",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7277693",
"url": "https://www.ibm.com/support/pages/node/7277693"
},
{
"published_at": "2026-06-23",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7277544",
"url": "https://www.ibm.com/support/pages/node/7277544"
},
{
"published_at": "2026-06-23",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7277550",
"url": "https://www.ibm.com/support/pages/node/7277550"
},
{
"published_at": "2026-06-23",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7277424",
"url": "https://www.ibm.com/support/pages/node/7277424"
},
{
"published_at": "2026-06-23",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7277420",
"url": "https://www.ibm.com/support/pages/node/7277420"
},
{
"published_at": "2026-06-24",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7277742",
"url": "https://www.ibm.com/support/pages/node/7277742"
},
{
"published_at": "2026-06-22",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7277387",
"url": "https://www.ibm.com/support/pages/node/7277387"
},
{
"published_at": "2026-06-23",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7277556",
"url": "https://www.ibm.com/support/pages/node/7277556"
},
{
"published_at": "2026-06-23",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7277555",
"url": "https://www.ibm.com/support/pages/node/7277555"
},
{
"published_at": "2026-06-26",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7278112",
"url": "https://www.ibm.com/support/pages/node/7278112"
},
{
"published_at": "2026-06-23",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7277422",
"url": "https://www.ibm.com/support/pages/node/7277422"
},
{
"published_at": "2026-06-23",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7277536",
"url": "https://www.ibm.com/support/pages/node/7277536"
},
{
"published_at": "2026-06-24",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7277767",
"url": "https://www.ibm.com/support/pages/node/7277767"
},
{
"published_at": "2026-06-26",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7278103",
"url": "https://www.ibm.com/support/pages/node/7278103"
}
]
}
CERTFR-2026-AVI-0834
Vulnerability from certfr_avis - Published: 2026-07-03 - Updated: 2026-07-03
De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| IBM | WebSphere | WebSphere Application Server versions 9.x antérieures à 9.0.5.29 | ||
| IBM | Db2 | Db2 Genius Hub versions antérieures à 1.1.3 | ||
| IBM | Db2 | Db2 Big SQL on IBM Software Hub versions antérieures à 5.4 | ||
| IBM | WebSphere | WebSphere Remote Server versions 9.x antérieures à 9.0.5.29 | ||
| IBM | N/A | SOAR QRadar Plugin App versions antérieures à 5.6.5 | ||
| IBM | WebSphere | WebSphere Remote Server versions 8.5.x antérieures à 8.5.5.31 | ||
| IBM | WebSphere | WebSphere Application Server versions 8.x antérieures à 8.5.5.31 | ||
| IBM | WebSphere | WebSphere Application Server Liberty versions antérieures à 26.0.0.8 |
References
| Title | Publication Time | Tags | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "WebSphere Application Server versions 9.x ant\u00e9rieures \u00e0 9.0.5.29",
"product": {
"name": "WebSphere",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "Db2 Genius Hub versions ant\u00e9rieures \u00e0 1.1.3",
"product": {
"name": "Db2",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "Db2 Big SQL on IBM Software Hub versions ant\u00e9rieures \u00e0 5.4",
"product": {
"name": "Db2",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "WebSphere Remote Server versions 9.x ant\u00e9rieures \u00e0 9.0.5.29",
"product": {
"name": "WebSphere",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "SOAR QRadar Plugin App versions ant\u00e9rieures \u00e0 5.6.5",
"product": {
"name": "N/A",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "WebSphere Remote Server versions 8.5.x ant\u00e9rieures \u00e0 8.5.5.31",
"product": {
"name": "WebSphere",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "WebSphere Application Server versions 8.x ant\u00e9rieures \u00e0 8.5.5.31",
"product": {
"name": "WebSphere",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "WebSphere Application Server Liberty versions ant\u00e9rieures \u00e0 26.0.0.8",
"product": {
"name": "WebSphere",
"vendor": {
"name": "IBM",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-50645",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50645"
},
{
"name": "CVE-2026-11383",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11383"
},
{
"name": "CVE-2026-42041",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42041"
},
{
"name": "CVE-2026-39892",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39892"
},
{
"name": "CVE-2024-7531",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-7531"
},
{
"name": "CVE-2021-3572",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-3572"
},
{
"name": "CVE-2026-44432",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44432"
},
{
"name": "CVE-2025-14688",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14688"
},
{
"name": "CVE-2026-9171",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9171"
},
{
"name": "CVE-2024-12086",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-12086"
},
{
"name": "CVE-2026-1577",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-1577"
},
{
"name": "CVE-2025-6069",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6069"
},
{
"name": "CVE-2026-2391",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2391"
},
{
"name": "CVE-2026-9072",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9072"
},
{
"name": "CVE-2026-24737",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-24737"
},
{
"name": "CVE-2026-8858",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8858"
},
{
"name": "CVE-2026-7246",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-7246"
},
{
"name": "CVE-2025-15284",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-15284"
},
{
"name": "CVE-2026-22029",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-22029"
},
{
"name": "CVE-2026-11541",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11541"
},
{
"name": "CVE-2025-1371",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1371"
},
{
"name": "CVE-2026-11707",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11707"
},
{
"name": "CVE-2026-11546",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11546"
},
{
"name": "CVE-2026-42036",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42036"
},
{
"name": "CVE-2021-23337",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-23337"
},
{
"name": "CVE-2026-11594",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11594"
},
{
"name": "CVE-2025-8291",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-8291"
},
{
"name": "CVE-2025-64718",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-64718"
},
{
"name": "CVE-2026-24043",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-24043"
},
{
"name": "CVE-2025-13755",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13755"
},
{
"name": "CVE-2025-62718",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-62718"
},
{
"name": "CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"name": "CVE-2026-6051",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6051"
},
{
"name": "CVE-2025-50182",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50182"
},
{
"name": "CVE-2026-33671",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33671"
},
{
"name": "CVE-2026-33532",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33532"
},
{
"name": "CVE-2025-68470",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68470"
},
{
"name": "CVE-2026-42033",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42033"
},
{
"name": "CVE-2026-42035",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42035"
},
{
"name": "CVE-2026-11536",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11536"
},
{
"name": "CVE-2025-50181",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-50181"
},
{
"name": "CVE-2025-1795",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1795"
},
{
"name": "CVE-2026-33750",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33750"
},
{
"name": "CVE-2026-42043",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42043"
},
{
"name": "CVE-2026-8646",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-8646"
},
{
"name": "CVE-2026-33228",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33228"
},
{
"name": "CVE-2026-9320",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9320"
},
{
"name": "CVE-2026-6053",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6053"
},
{
"name": "CVE-2025-68161",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68161"
},
{
"name": "CVE-2024-29869",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-29869"
},
{
"name": "CVE-2026-42040",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42040"
},
{
"name": "CVE-2026-4923",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4923"
},
{
"name": "CVE-2026-6052",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6052"
},
{
"name": "CVE-2025-1377",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1377"
},
{
"name": "CVE-2026-27903",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27903"
},
{
"name": "CVE-2024-25260",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-25260"
},
{
"name": "CVE-2026-24133",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-24133"
},
{
"name": "CVE-2026-10845",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-10845"
},
{
"name": "CVE-2026-2327",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2327"
},
{
"name": "CVE-2026-2950",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2950"
},
{
"name": "CVE-2026-3676",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-3676"
},
{
"name": "CVE-2026-1352",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-1352"
},
{
"name": "CVE-2025-1376",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-1376"
},
{
"name": "CVE-2025-69873",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69873"
},
{
"name": "CVE-2025-67735",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-67735"
},
{
"name": "CVE-2025-36122",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-36122"
},
{
"name": "CVE-2026-25940",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25940"
},
{
"name": "CVE-2026-24040",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-24040"
},
{
"name": "CVE-2026-42038",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42038"
},
{
"name": "CVE-2026-11708",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11708"
},
{
"name": "CVE-2026-42039",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42039"
},
{
"name": "CVE-2026-25755",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25755"
},
{
"name": "CVE-2026-33672",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33672"
},
{
"name": "CVE-2025-58181",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58181"
},
{
"name": "CVE-2025-47914",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47914"
},
{
"name": "CVE-2025-4516",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-4516"
},
{
"name": "CVE-2026-25639",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25639"
},
{
"name": "CVE-2026-42044",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42044"
},
{
"name": "CVE-2026-11595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11595"
},
{
"name": "CVE-2026-11714",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11714"
},
{
"name": "CVE-2026-25535",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25535"
},
{
"name": "CVE-2026-42034",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42034"
},
{
"name": "CVE-2026-9322",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9322"
},
{
"name": "CVE-2026-31938",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-31938"
},
{
"name": "CVE-2025-48924",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-48924"
},
{
"name": "CVE-2026-6938",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6938"
},
{
"name": "CVE-2026-11712",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11712"
},
{
"name": "CVE-2026-44431",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44431"
},
{
"name": "CVE-2026-42264",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42264"
},
{
"name": "CVE-2026-13772",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13772"
},
{
"name": "CVE-2026-32141",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32141"
},
{
"name": "CVE-2026-42037",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42037"
},
{
"name": "CVE-2026-42042",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42042"
},
{
"name": "CVE-2026-9071",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9071"
},
{
"name": "CVE-2026-9006",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9006"
},
{
"name": "CVE-2026-31898",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-31898"
},
{
"name": "CVE-2026-24001",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-24001"
},
{
"name": "CVE-2023-24056",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-24056"
},
{
"name": "CVE-2024-24786",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-24786"
},
{
"name": "CVE-2026-10852",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-10852"
},
{
"name": "CVE-2026-27212",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27212"
},
{
"name": "CVE-2025-12183",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-12183"
},
{
"name": "CVE-2026-29063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
},
{
"name": "CVE-2025-68428",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68428"
},
{
"name": "CVE-2025-13465",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-13465"
},
{
"name": "CVE-2026-4926",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4926"
},
{
"name": "CVE-2026-1718",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-1718"
},
{
"name": "CVE-2026-27904",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27904"
}
],
"initial_release_date": "2026-07-03T00:00:00",
"last_revision_date": "2026-07-03T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0834",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-07-03T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Falsification de requ\u00eates c\u00f4t\u00e9 serveur (SSRF)"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits IBM. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits IBM",
"vendor_advisories": [
{
"published_at": "2026-06-29",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7278360",
"url": "https://www.ibm.com/support/pages/node/7278360"
},
{
"published_at": "2026-07-02",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7279004",
"url": "https://www.ibm.com/support/pages/node/7279004"
},
{
"published_at": "2026-07-02",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7278998",
"url": "https://www.ibm.com/support/pages/node/7278998"
},
{
"published_at": "2026-07-02",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7278996",
"url": "https://www.ibm.com/support/pages/node/7278996"
},
{
"published_at": "2026-07-02",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7278993",
"url": "https://www.ibm.com/support/pages/node/7278993"
},
{
"published_at": "2026-07-02",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7279001",
"url": "https://www.ibm.com/support/pages/node/7279001"
},
{
"published_at": "2026-07-02",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7278935",
"url": "https://www.ibm.com/support/pages/node/7278935"
},
{
"published_at": "2026-06-30",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7278590",
"url": "https://www.ibm.com/support/pages/node/7278590"
},
{
"published_at": "2026-06-26",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7278148",
"url": "https://www.ibm.com/support/pages/node/7278148"
},
{
"published_at": "2026-07-02",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7279002",
"url": "https://www.ibm.com/support/pages/node/7279002"
},
{
"published_at": "2026-07-02",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7278995",
"url": "https://www.ibm.com/support/pages/node/7278995"
},
{
"published_at": "2026-07-02",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7278997",
"url": "https://www.ibm.com/support/pages/node/7278997"
},
{
"published_at": "2026-07-02",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7278990",
"url": "https://www.ibm.com/support/pages/node/7278990"
},
{
"published_at": "2026-06-29",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7278358",
"url": "https://www.ibm.com/support/pages/node/7278358"
},
{
"published_at": "2026-07-02",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7278989",
"url": "https://www.ibm.com/support/pages/node/7278989"
},
{
"published_at": "2026-06-30",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7278576",
"url": "https://www.ibm.com/support/pages/node/7278576"
},
{
"published_at": "2026-06-30",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7278572",
"url": "https://www.ibm.com/support/pages/node/7278572"
},
{
"published_at": "2026-06-30",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7278580",
"url": "https://www.ibm.com/support/pages/node/7278580"
},
{
"published_at": "2026-06-29",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7278398",
"url": "https://www.ibm.com/support/pages/node/7278398"
},
{
"published_at": "2026-06-29",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7278359",
"url": "https://www.ibm.com/support/pages/node/7278359"
},
{
"published_at": "2026-07-02",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7279003",
"url": "https://www.ibm.com/support/pages/node/7279003"
},
{
"published_at": "2026-06-26",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7278103",
"url": "https://www.ibm.com/support/pages/node/7278103"
},
{
"published_at": "2026-06-30",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7278593",
"url": "https://www.ibm.com/support/pages/node/7278593"
},
{
"published_at": "2026-06-29",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7278399",
"url": "https://www.ibm.com/support/pages/node/7278399"
}
]
}
CERTFR-2026-AVI-0865
Vulnerability from certfr_avis - Published: 2026-07-10 - Updated: 2026-07-10
De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et une falsification de requêtes côté serveur (SSRF).
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| IBM | WebSphere Application Server | WebSphere Application Server Liberty versions antérieures à 26.0.0.8 | ||
| IBM | WebSphere | WebSphere Remote Server versions 9.x antérieures à 9.0.5.29 | ||
| IBM | QRadar | QRadar App SDK versions antérieures à 2.2.5 | ||
| IBM | WebSphere | WebSphere Remote Server versions 8.5.x antérieures à 8.5.5.31 | ||
| IBM | WebSphere Hybrid Edition | WebSphere Hybrid Edition version 5.1 sans les correctifs de sécurité PH71757, PH71808, PH71706, PH71719, PH71756, PH71873, PH71841, PH71585 et PH71670 |
References
| Title | Publication Time | Tags | |||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "WebSphere Application Server Liberty versions ant\u00e9rieures \u00e0 26.0.0.8",
"product": {
"name": "WebSphere Application Server",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "WebSphere Remote Server versions 9.x ant\u00e9rieures \u00e0 9.0.5.29",
"product": {
"name": "WebSphere",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "QRadar App SDK versions ant\u00e9rieures \u00e0 2.2.5",
"product": {
"name": "QRadar",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "WebSphere Remote Server versions 8.5.x ant\u00e9rieures \u00e0 8.5.5.31",
"product": {
"name": "WebSphere",
"vendor": {
"name": "IBM",
"scada": false
}
}
},
{
"description": "WebSphere Hybrid Edition version 5.1 sans les correctifs de s\u00e9curit\u00e9 PH71757, PH71808, PH71706, PH71719, PH71756, PH71873, PH71841, PH71585 et PH71670",
"product": {
"name": "WebSphere Hybrid Edition",
"vendor": {
"name": "IBM",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-26007",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-26007"
},
{
"name": "CVE-2026-50645",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50645"
},
{
"name": "CVE-2026-11383",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11383"
},
{
"name": "CVE-2026-39892",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39892"
},
{
"name": "CVE-2026-9171",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9171"
},
{
"name": "CVE-2026-11541",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11541"
},
{
"name": "CVE-2026-11707",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11707"
},
{
"name": "CVE-2026-11546",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11546"
},
{
"name": "CVE-2026-34073",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34073"
},
{
"name": "CVE-2026-11594",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11594"
},
{
"name": "CVE-2025-66471",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66471"
},
{
"name": "CVE-2026-21441",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21441"
},
{
"name": "CVE-2024-29371",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-29371"
},
{
"name": "CVE-2026-11708",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11708"
},
{
"name": "CVE-2025-69277",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-69277"
},
{
"name": "CVE-2026-11595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11595"
},
{
"name": "CVE-2026-11714",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11714"
},
{
"name": "CVE-2026-9322",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9322"
},
{
"name": "CVE-2026-9563",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9563"
},
{
"name": "CVE-2026-11712",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11712"
},
{
"name": "CVE-2026-11806",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11806"
},
{
"name": "CVE-2025-66418",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66418"
}
],
"initial_release_date": "2026-07-10T00:00:00",
"last_revision_date": "2026-07-10T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0865",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-07-10T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Falsification de requ\u00eates c\u00f4t\u00e9 serveur (SSRF)"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits IBM. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une falsification de requ\u00eates c\u00f4t\u00e9 serveur (SSRF).",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits IBM",
"vendor_advisories": [
{
"published_at": "2026-07-07",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7279261",
"url": "https://www.ibm.com/support/pages/node/7279261"
},
{
"published_at": "2026-07-06",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7279194",
"url": "https://www.ibm.com/support/pages/node/7279194"
},
{
"published_at": "2026-07-07",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7279276",
"url": "https://www.ibm.com/support/pages/node/7279276"
},
{
"published_at": "2026-07-07",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7279281",
"url": "https://www.ibm.com/support/pages/node/7279281"
},
{
"published_at": "2026-07-07",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7267514",
"url": "https://www.ibm.com/support/pages/node/7267514"
},
{
"published_at": "2026-07-06",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7279199",
"url": "https://www.ibm.com/support/pages/node/7279199"
},
{
"published_at": "2026-07-06",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7279196",
"url": "https://www.ibm.com/support/pages/node/7279196"
},
{
"published_at": "2026-07-08",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7279493",
"url": "https://www.ibm.com/support/pages/node/7279493"
},
{
"published_at": "2026-07-09",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7279620",
"url": "https://www.ibm.com/support/pages/node/7279620"
},
{
"published_at": "2026-07-07",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7279284",
"url": "https://www.ibm.com/support/pages/node/7279284"
},
{
"published_at": "2026-07-07",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7279322",
"url": "https://www.ibm.com/support/pages/node/7279322"
},
{
"published_at": "2026-07-07",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7279264",
"url": "https://www.ibm.com/support/pages/node/7279264"
},
{
"published_at": "2026-07-07",
"title": "Bulletin de s\u00e9curit\u00e9 IBM 7279271",
"url": "https://www.ibm.com/support/pages/node/7279271"
}
]
}
WID-SEC-W-2026-2050
Vulnerability from csaf_certbund - Published: 2026-06-23 22:00 - Updated: 2026-07-21 22:00Summary
IBM WebSphere Application Server und Application Server Liberty: Mehrere Schwachstellen
Severity
Hoch
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung: IBM WebSphere Application Server Liberty ist ein leichter, dynamischer Anwendungsserver zur Entwicklung und Bereitstellung von Java-Anwendungen und Microservices.
IBM WebSphere Application Server ist ein J2EE-Applikationsserver.
Angriff: Ein Angreifer kann mehrere Schwachstellen in IBM WebSphere Application Server Liberty und IBM WebSphere Application Server ausnutzen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen, um beliebigen Programmcode auszuführen, um Informationen offenzulegen, und um einen Denial of Service Angriff durchzuführen.
Betroffene Betriebssysteme: - Linux
- Sonstiges
- UNIX
- Windows
Affected products
Known affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Tivoli Network Manager IP Edition
IBM / Tivoli Network Manager
|
cpe:/a:ibm:tivoli_network_manager:ip_edition
|
IP Edition | |
|
IBM License Metric Tool
IBM
|
cpe:/a:ibm:license_metric_tool:-
|
— | |
|
IBM WebSphere Application Server Liberty <26.0.0.7
IBM / WebSphere Application Server Liberty
|
<26.0.0.7 | ||
|
IBM WebSphere Application Server <8.5.5.29 PH71714
IBM / WebSphere Application Server
|
<8.5.5.29 PH71714 | ||
|
IBM WebSphere Application Server Liberty <26.0.0.6 PH71808
IBM / WebSphere Application Server Liberty
|
<26.0.0.6 PH71808 | ||
|
IBM WebSphere Application Server <9.0.5.28 PH71714
IBM / WebSphere Application Server
|
<9.0.5.28 PH71714 | ||
|
IBM WebSphere Application Server <8.5.5.29 PH71757
IBM / WebSphere Application Server
|
<8.5.5.29 PH71757 | ||
|
IBM WebSphere Application Server <9.0.5.28 PH71757
IBM / WebSphere Application Server
|
<9.0.5.28 PH71757 | ||
|
IBM WebSphere Application Server <8.5.5.31
IBM / WebSphere Application Server
|
<8.5.5.31 | ||
|
IBM WebSphere Application Server <8.5.5.30 PH71706
IBM / WebSphere Application Server
|
<8.5.5.30 PH71706 | ||
|
IBM WebSphere Application Server <9.0.5.29
IBM / WebSphere Application Server
|
<9.0.5.29 | ||
|
IBM WebSphere Service Registry and Repository
IBM
|
cpe:/a:ibm:websphere_service_registry_and_repository:-
|
— | |
|
IBM App Connect Enterprise
IBM
|
cpe:/a:ibm:app_connect_enterprise:-
|
— | |
|
IBM WebSphere Application Server <9.0.5.28 PH71706
IBM / WebSphere Application Server
|
<9.0.5.28 PH71706 | ||
|
IBM WebSphere Application Server Liberty <26.0.0.6 PH71687
IBM / WebSphere Application Server Liberty
|
<26.0.0.6 PH71687 | ||
|
IBM WebSphere Application Server Liberty <26.0.0.6 PH71719
IBM / WebSphere Application Server Liberty
|
<26.0.0.6 PH71719 | ||
|
IBM Business Automation Workflow
IBM
|
cpe:/a:ibm:business_automation_workflow:traditional
|
— |
Affected products
Known affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Tivoli Network Manager IP Edition
IBM / Tivoli Network Manager
|
cpe:/a:ibm:tivoli_network_manager:ip_edition
|
IP Edition | |
|
IBM License Metric Tool
IBM
|
cpe:/a:ibm:license_metric_tool:-
|
— | |
|
IBM WebSphere Application Server Liberty <26.0.0.7
IBM / WebSphere Application Server Liberty
|
<26.0.0.7 | ||
|
IBM WebSphere Application Server <8.5.5.29 PH71714
IBM / WebSphere Application Server
|
<8.5.5.29 PH71714 | ||
|
IBM WebSphere Application Server Liberty <26.0.0.6 PH71808
IBM / WebSphere Application Server Liberty
|
<26.0.0.6 PH71808 | ||
|
IBM WebSphere Application Server <9.0.5.28 PH71714
IBM / WebSphere Application Server
|
<9.0.5.28 PH71714 | ||
|
IBM WebSphere Application Server <8.5.5.29 PH71757
IBM / WebSphere Application Server
|
<8.5.5.29 PH71757 | ||
|
IBM WebSphere Application Server <9.0.5.28 PH71757
IBM / WebSphere Application Server
|
<9.0.5.28 PH71757 | ||
|
IBM WebSphere Application Server <8.5.5.31
IBM / WebSphere Application Server
|
<8.5.5.31 | ||
|
IBM WebSphere Application Server <8.5.5.30 PH71706
IBM / WebSphere Application Server
|
<8.5.5.30 PH71706 | ||
|
IBM WebSphere Application Server <9.0.5.29
IBM / WebSphere Application Server
|
<9.0.5.29 | ||
|
IBM WebSphere Service Registry and Repository
IBM
|
cpe:/a:ibm:websphere_service_registry_and_repository:-
|
— | |
|
IBM App Connect Enterprise
IBM
|
cpe:/a:ibm:app_connect_enterprise:-
|
— | |
|
IBM WebSphere Application Server <9.0.5.28 PH71706
IBM / WebSphere Application Server
|
<9.0.5.28 PH71706 | ||
|
IBM WebSphere Application Server Liberty <26.0.0.6 PH71687
IBM / WebSphere Application Server Liberty
|
<26.0.0.6 PH71687 | ||
|
IBM WebSphere Application Server Liberty <26.0.0.6 PH71719
IBM / WebSphere Application Server Liberty
|
<26.0.0.6 PH71719 | ||
|
IBM Business Automation Workflow
IBM
|
cpe:/a:ibm:business_automation_workflow:traditional
|
— |
Affected products
Known affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Tivoli Network Manager IP Edition
IBM / Tivoli Network Manager
|
cpe:/a:ibm:tivoli_network_manager:ip_edition
|
IP Edition | |
|
IBM License Metric Tool
IBM
|
cpe:/a:ibm:license_metric_tool:-
|
— | |
|
IBM WebSphere Application Server Liberty <26.0.0.7
IBM / WebSphere Application Server Liberty
|
<26.0.0.7 | ||
|
IBM WebSphere Application Server <8.5.5.29 PH71714
IBM / WebSphere Application Server
|
<8.5.5.29 PH71714 | ||
|
IBM WebSphere Application Server Liberty <26.0.0.6 PH71808
IBM / WebSphere Application Server Liberty
|
<26.0.0.6 PH71808 | ||
|
IBM WebSphere Application Server <9.0.5.28 PH71714
IBM / WebSphere Application Server
|
<9.0.5.28 PH71714 | ||
|
IBM WebSphere Application Server <8.5.5.29 PH71757
IBM / WebSphere Application Server
|
<8.5.5.29 PH71757 | ||
|
IBM WebSphere Application Server <9.0.5.28 PH71757
IBM / WebSphere Application Server
|
<9.0.5.28 PH71757 | ||
|
IBM WebSphere Application Server <8.5.5.31
IBM / WebSphere Application Server
|
<8.5.5.31 | ||
|
IBM WebSphere Application Server <8.5.5.30 PH71706
IBM / WebSphere Application Server
|
<8.5.5.30 PH71706 | ||
|
IBM WebSphere Application Server <9.0.5.29
IBM / WebSphere Application Server
|
<9.0.5.29 | ||
|
IBM WebSphere Service Registry and Repository
IBM
|
cpe:/a:ibm:websphere_service_registry_and_repository:-
|
— | |
|
IBM App Connect Enterprise
IBM
|
cpe:/a:ibm:app_connect_enterprise:-
|
— | |
|
IBM WebSphere Application Server <9.0.5.28 PH71706
IBM / WebSphere Application Server
|
<9.0.5.28 PH71706 | ||
|
IBM WebSphere Application Server Liberty <26.0.0.6 PH71687
IBM / WebSphere Application Server Liberty
|
<26.0.0.6 PH71687 | ||
|
IBM WebSphere Application Server Liberty <26.0.0.6 PH71719
IBM / WebSphere Application Server Liberty
|
<26.0.0.6 PH71719 | ||
|
IBM Business Automation Workflow
IBM
|
cpe:/a:ibm:business_automation_workflow:traditional
|
— |
Affected products
Known affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Tivoli Network Manager IP Edition
IBM / Tivoli Network Manager
|
cpe:/a:ibm:tivoli_network_manager:ip_edition
|
IP Edition | |
|
IBM License Metric Tool
IBM
|
cpe:/a:ibm:license_metric_tool:-
|
— | |
|
IBM WebSphere Application Server Liberty <26.0.0.7
IBM / WebSphere Application Server Liberty
|
<26.0.0.7 | ||
|
IBM WebSphere Application Server <8.5.5.29 PH71714
IBM / WebSphere Application Server
|
<8.5.5.29 PH71714 | ||
|
IBM WebSphere Application Server Liberty <26.0.0.6 PH71808
IBM / WebSphere Application Server Liberty
|
<26.0.0.6 PH71808 | ||
|
IBM WebSphere Application Server <9.0.5.28 PH71714
IBM / WebSphere Application Server
|
<9.0.5.28 PH71714 | ||
|
IBM WebSphere Application Server <8.5.5.29 PH71757
IBM / WebSphere Application Server
|
<8.5.5.29 PH71757 | ||
|
IBM WebSphere Application Server <9.0.5.28 PH71757
IBM / WebSphere Application Server
|
<9.0.5.28 PH71757 | ||
|
IBM WebSphere Application Server <8.5.5.31
IBM / WebSphere Application Server
|
<8.5.5.31 | ||
|
IBM WebSphere Application Server <8.5.5.30 PH71706
IBM / WebSphere Application Server
|
<8.5.5.30 PH71706 | ||
|
IBM WebSphere Application Server <9.0.5.29
IBM / WebSphere Application Server
|
<9.0.5.29 | ||
|
IBM WebSphere Service Registry and Repository
IBM
|
cpe:/a:ibm:websphere_service_registry_and_repository:-
|
— | |
|
IBM App Connect Enterprise
IBM
|
cpe:/a:ibm:app_connect_enterprise:-
|
— | |
|
IBM WebSphere Application Server <9.0.5.28 PH71706
IBM / WebSphere Application Server
|
<9.0.5.28 PH71706 | ||
|
IBM WebSphere Application Server Liberty <26.0.0.6 PH71687
IBM / WebSphere Application Server Liberty
|
<26.0.0.6 PH71687 | ||
|
IBM WebSphere Application Server Liberty <26.0.0.6 PH71719
IBM / WebSphere Application Server Liberty
|
<26.0.0.6 PH71719 | ||
|
IBM Business Automation Workflow
IBM
|
cpe:/a:ibm:business_automation_workflow:traditional
|
— |
Affected products
Known affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Tivoli Network Manager IP Edition
IBM / Tivoli Network Manager
|
cpe:/a:ibm:tivoli_network_manager:ip_edition
|
IP Edition | |
|
IBM License Metric Tool
IBM
|
cpe:/a:ibm:license_metric_tool:-
|
— | |
|
IBM WebSphere Application Server Liberty <26.0.0.7
IBM / WebSphere Application Server Liberty
|
<26.0.0.7 | ||
|
IBM WebSphere Application Server <8.5.5.29 PH71714
IBM / WebSphere Application Server
|
<8.5.5.29 PH71714 | ||
|
IBM WebSphere Application Server Liberty <26.0.0.6 PH71808
IBM / WebSphere Application Server Liberty
|
<26.0.0.6 PH71808 | ||
|
IBM WebSphere Application Server <9.0.5.28 PH71714
IBM / WebSphere Application Server
|
<9.0.5.28 PH71714 | ||
|
IBM WebSphere Application Server <8.5.5.29 PH71757
IBM / WebSphere Application Server
|
<8.5.5.29 PH71757 | ||
|
IBM WebSphere Application Server <9.0.5.28 PH71757
IBM / WebSphere Application Server
|
<9.0.5.28 PH71757 | ||
|
IBM WebSphere Application Server <8.5.5.31
IBM / WebSphere Application Server
|
<8.5.5.31 | ||
|
IBM WebSphere Application Server <8.5.5.30 PH71706
IBM / WebSphere Application Server
|
<8.5.5.30 PH71706 | ||
|
IBM WebSphere Application Server <9.0.5.29
IBM / WebSphere Application Server
|
<9.0.5.29 | ||
|
IBM WebSphere Service Registry and Repository
IBM
|
cpe:/a:ibm:websphere_service_registry_and_repository:-
|
— | |
|
IBM App Connect Enterprise
IBM
|
cpe:/a:ibm:app_connect_enterprise:-
|
— | |
|
IBM WebSphere Application Server <9.0.5.28 PH71706
IBM / WebSphere Application Server
|
<9.0.5.28 PH71706 | ||
|
IBM WebSphere Application Server Liberty <26.0.0.6 PH71687
IBM / WebSphere Application Server Liberty
|
<26.0.0.6 PH71687 | ||
|
IBM WebSphere Application Server Liberty <26.0.0.6 PH71719
IBM / WebSphere Application Server Liberty
|
<26.0.0.6 PH71719 | ||
|
IBM Business Automation Workflow
IBM
|
cpe:/a:ibm:business_automation_workflow:traditional
|
— |
Affected products
Known affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Tivoli Network Manager IP Edition
IBM / Tivoli Network Manager
|
cpe:/a:ibm:tivoli_network_manager:ip_edition
|
IP Edition | |
|
IBM License Metric Tool
IBM
|
cpe:/a:ibm:license_metric_tool:-
|
— | |
|
IBM WebSphere Application Server Liberty <26.0.0.7
IBM / WebSphere Application Server Liberty
|
<26.0.0.7 | ||
|
IBM WebSphere Application Server <8.5.5.29 PH71714
IBM / WebSphere Application Server
|
<8.5.5.29 PH71714 | ||
|
IBM WebSphere Application Server Liberty <26.0.0.6 PH71808
IBM / WebSphere Application Server Liberty
|
<26.0.0.6 PH71808 | ||
|
IBM WebSphere Application Server <9.0.5.28 PH71714
IBM / WebSphere Application Server
|
<9.0.5.28 PH71714 | ||
|
IBM WebSphere Application Server <8.5.5.29 PH71757
IBM / WebSphere Application Server
|
<8.5.5.29 PH71757 | ||
|
IBM WebSphere Application Server <9.0.5.28 PH71757
IBM / WebSphere Application Server
|
<9.0.5.28 PH71757 | ||
|
IBM WebSphere Application Server <8.5.5.31
IBM / WebSphere Application Server
|
<8.5.5.31 | ||
|
IBM WebSphere Application Server <8.5.5.30 PH71706
IBM / WebSphere Application Server
|
<8.5.5.30 PH71706 | ||
|
IBM WebSphere Application Server <9.0.5.29
IBM / WebSphere Application Server
|
<9.0.5.29 | ||
|
IBM WebSphere Service Registry and Repository
IBM
|
cpe:/a:ibm:websphere_service_registry_and_repository:-
|
— | |
|
IBM App Connect Enterprise
IBM
|
cpe:/a:ibm:app_connect_enterprise:-
|
— | |
|
IBM WebSphere Application Server <9.0.5.28 PH71706
IBM / WebSphere Application Server
|
<9.0.5.28 PH71706 | ||
|
IBM WebSphere Application Server Liberty <26.0.0.6 PH71687
IBM / WebSphere Application Server Liberty
|
<26.0.0.6 PH71687 | ||
|
IBM WebSphere Application Server Liberty <26.0.0.6 PH71719
IBM / WebSphere Application Server Liberty
|
<26.0.0.6 PH71719 | ||
|
IBM Business Automation Workflow
IBM
|
cpe:/a:ibm:business_automation_workflow:traditional
|
— |
Affected products
Known affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Tivoli Network Manager IP Edition
IBM / Tivoli Network Manager
|
cpe:/a:ibm:tivoli_network_manager:ip_edition
|
IP Edition | |
|
IBM License Metric Tool
IBM
|
cpe:/a:ibm:license_metric_tool:-
|
— | |
|
IBM WebSphere Application Server Liberty <26.0.0.7
IBM / WebSphere Application Server Liberty
|
<26.0.0.7 | ||
|
IBM WebSphere Application Server <8.5.5.29 PH71714
IBM / WebSphere Application Server
|
<8.5.5.29 PH71714 | ||
|
IBM WebSphere Application Server Liberty <26.0.0.6 PH71808
IBM / WebSphere Application Server Liberty
|
<26.0.0.6 PH71808 | ||
|
IBM WebSphere Application Server <9.0.5.28 PH71714
IBM / WebSphere Application Server
|
<9.0.5.28 PH71714 | ||
|
IBM WebSphere Application Server <8.5.5.29 PH71757
IBM / WebSphere Application Server
|
<8.5.5.29 PH71757 | ||
|
IBM WebSphere Application Server <9.0.5.28 PH71757
IBM / WebSphere Application Server
|
<9.0.5.28 PH71757 | ||
|
IBM WebSphere Application Server <8.5.5.31
IBM / WebSphere Application Server
|
<8.5.5.31 | ||
|
IBM WebSphere Application Server <8.5.5.30 PH71706
IBM / WebSphere Application Server
|
<8.5.5.30 PH71706 | ||
|
IBM WebSphere Application Server <9.0.5.29
IBM / WebSphere Application Server
|
<9.0.5.29 | ||
|
IBM WebSphere Service Registry and Repository
IBM
|
cpe:/a:ibm:websphere_service_registry_and_repository:-
|
— | |
|
IBM App Connect Enterprise
IBM
|
cpe:/a:ibm:app_connect_enterprise:-
|
— | |
|
IBM WebSphere Application Server <9.0.5.28 PH71706
IBM / WebSphere Application Server
|
<9.0.5.28 PH71706 | ||
|
IBM WebSphere Application Server Liberty <26.0.0.6 PH71687
IBM / WebSphere Application Server Liberty
|
<26.0.0.6 PH71687 | ||
|
IBM WebSphere Application Server Liberty <26.0.0.6 PH71719
IBM / WebSphere Application Server Liberty
|
<26.0.0.6 PH71719 | ||
|
IBM Business Automation Workflow
IBM
|
cpe:/a:ibm:business_automation_workflow:traditional
|
— |
Affected products
Known affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Tivoli Network Manager IP Edition
IBM / Tivoli Network Manager
|
cpe:/a:ibm:tivoli_network_manager:ip_edition
|
IP Edition | |
|
IBM License Metric Tool
IBM
|
cpe:/a:ibm:license_metric_tool:-
|
— | |
|
IBM WebSphere Application Server Liberty <26.0.0.7
IBM / WebSphere Application Server Liberty
|
<26.0.0.7 | ||
|
IBM WebSphere Application Server <8.5.5.29 PH71714
IBM / WebSphere Application Server
|
<8.5.5.29 PH71714 | ||
|
IBM WebSphere Application Server Liberty <26.0.0.6 PH71808
IBM / WebSphere Application Server Liberty
|
<26.0.0.6 PH71808 | ||
|
IBM WebSphere Application Server <9.0.5.28 PH71714
IBM / WebSphere Application Server
|
<9.0.5.28 PH71714 | ||
|
IBM WebSphere Application Server <8.5.5.29 PH71757
IBM / WebSphere Application Server
|
<8.5.5.29 PH71757 | ||
|
IBM WebSphere Application Server <9.0.5.28 PH71757
IBM / WebSphere Application Server
|
<9.0.5.28 PH71757 | ||
|
IBM WebSphere Application Server <8.5.5.31
IBM / WebSphere Application Server
|
<8.5.5.31 | ||
|
IBM WebSphere Application Server <8.5.5.30 PH71706
IBM / WebSphere Application Server
|
<8.5.5.30 PH71706 | ||
|
IBM WebSphere Application Server <9.0.5.29
IBM / WebSphere Application Server
|
<9.0.5.29 | ||
|
IBM WebSphere Service Registry and Repository
IBM
|
cpe:/a:ibm:websphere_service_registry_and_repository:-
|
— | |
|
IBM App Connect Enterprise
IBM
|
cpe:/a:ibm:app_connect_enterprise:-
|
— | |
|
IBM WebSphere Application Server <9.0.5.28 PH71706
IBM / WebSphere Application Server
|
<9.0.5.28 PH71706 | ||
|
IBM WebSphere Application Server Liberty <26.0.0.6 PH71687
IBM / WebSphere Application Server Liberty
|
<26.0.0.6 PH71687 | ||
|
IBM WebSphere Application Server Liberty <26.0.0.6 PH71719
IBM / WebSphere Application Server Liberty
|
<26.0.0.6 PH71719 | ||
|
IBM Business Automation Workflow
IBM
|
cpe:/a:ibm:business_automation_workflow:traditional
|
— |
Affected products
Known affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Tivoli Network Manager IP Edition
IBM / Tivoli Network Manager
|
cpe:/a:ibm:tivoli_network_manager:ip_edition
|
IP Edition | |
|
IBM License Metric Tool
IBM
|
cpe:/a:ibm:license_metric_tool:-
|
— | |
|
IBM WebSphere Application Server Liberty <26.0.0.7
IBM / WebSphere Application Server Liberty
|
<26.0.0.7 | ||
|
IBM WebSphere Application Server <8.5.5.29 PH71714
IBM / WebSphere Application Server
|
<8.5.5.29 PH71714 | ||
|
IBM WebSphere Application Server Liberty <26.0.0.6 PH71808
IBM / WebSphere Application Server Liberty
|
<26.0.0.6 PH71808 | ||
|
IBM WebSphere Application Server <9.0.5.28 PH71714
IBM / WebSphere Application Server
|
<9.0.5.28 PH71714 | ||
|
IBM WebSphere Application Server <8.5.5.29 PH71757
IBM / WebSphere Application Server
|
<8.5.5.29 PH71757 | ||
|
IBM WebSphere Application Server <9.0.5.28 PH71757
IBM / WebSphere Application Server
|
<9.0.5.28 PH71757 | ||
|
IBM WebSphere Application Server <8.5.5.31
IBM / WebSphere Application Server
|
<8.5.5.31 | ||
|
IBM WebSphere Application Server <8.5.5.30 PH71706
IBM / WebSphere Application Server
|
<8.5.5.30 PH71706 | ||
|
IBM WebSphere Application Server <9.0.5.29
IBM / WebSphere Application Server
|
<9.0.5.29 | ||
|
IBM WebSphere Service Registry and Repository
IBM
|
cpe:/a:ibm:websphere_service_registry_and_repository:-
|
— | |
|
IBM App Connect Enterprise
IBM
|
cpe:/a:ibm:app_connect_enterprise:-
|
— | |
|
IBM WebSphere Application Server <9.0.5.28 PH71706
IBM / WebSphere Application Server
|
<9.0.5.28 PH71706 | ||
|
IBM WebSphere Application Server Liberty <26.0.0.6 PH71687
IBM / WebSphere Application Server Liberty
|
<26.0.0.6 PH71687 | ||
|
IBM WebSphere Application Server Liberty <26.0.0.6 PH71719
IBM / WebSphere Application Server Liberty
|
<26.0.0.6 PH71719 | ||
|
IBM Business Automation Workflow
IBM
|
cpe:/a:ibm:business_automation_workflow:traditional
|
— |
References
12 references
| URL | Category |
|---|---|
| https://wid.cert-bund.de/.well-known/csaf/white/2… | self |
| https://wid.cert-bund.de/portal/wid/securityadvis… | self |
| https://www.ibm.com/support/pages/node/7277531 | external |
| https://www.ibm.com/support/pages/node/7277536 | external |
| https://www.ibm.com/support/pages/node/7277544 | external |
| https://www.ibm.com/support/pages/node/7277546 | external |
| https://www.ibm.com/support/pages/node/7277550 | external |
| https://www.ibm.com/support/pages/node/7278103 | external |
| https://www.ibm.com/support/pages/node/7278323 | external |
| https://www.ibm.com/support/pages/node/7278371 | external |
| https://www.ibm.com/support/pages/node/7278879 | external |
| https://www.ibm.com/support/pages/node/7280602 | external |
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "IBM WebSphere Application Server Liberty ist ein leichter, dynamischer Anwendungsserver zur Entwicklung und Bereitstellung von Java-Anwendungen und Microservices.\r\nIBM WebSphere Application Server ist ein J2EE-Applikationsserver.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein Angreifer kann mehrere Schwachstellen in IBM WebSphere Application Server Liberty und IBM WebSphere Application Server ausnutzen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuf\u00fchren, um beliebigen Programmcode auszuf\u00fchren, um Informationen offenzulegen, und um einen Denial of Service Angriff durchzuf\u00fchren.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Linux\n- Sonstiges\n- UNIX\n- Windows",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2026-2050 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2050.json"
},
{
"category": "self",
"summary": "WID-SEC-2026-2050 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2050"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7277531 vom 2026-06-23",
"url": "https://www.ibm.com/support/pages/node/7277531"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7277536 vom 2026-06-23",
"url": "https://www.ibm.com/support/pages/node/7277536"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7277544 vom 2026-06-23",
"url": "https://www.ibm.com/support/pages/node/7277544"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7277546 vom 2026-06-23",
"url": "https://www.ibm.com/support/pages/node/7277546"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7277550 vom 2026-06-23",
"url": "https://www.ibm.com/support/pages/node/7277550"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7278103 vom 2026-06-26",
"url": "https://www.ibm.com/support/pages/node/7278103"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7278323 vom 2026-06-29",
"url": "https://www.ibm.com/support/pages/node/7278323"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7278371 vom 2026-06-29",
"url": "https://www.ibm.com/support/pages/node/7278371"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7278879 vom 2026-07-02",
"url": "https://www.ibm.com/support/pages/node/7278879"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7280602 vom 2026-07-21",
"url": "https://www.ibm.com/support/pages/node/7280602"
}
],
"source_lang": "en-US",
"title": "IBM WebSphere Application Server und Application Server Liberty: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2026-07-21T22:00:00.000+00:00",
"generator": {
"date": "2026-07-22T09:18:56.227+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.6.0"
}
},
"id": "WID-SEC-W-2026-2050",
"initial_release_date": "2026-06-23T22:00:00.000+00:00",
"revision_history": [
{
"date": "2026-06-23T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2026-06-25T22:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2026-06-28T22:00:00.000+00:00",
"number": "3",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2026-06-29T22:00:00.000+00:00",
"number": "4",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2026-06-30T22:00:00.000+00:00",
"number": "5",
"summary": "Referenz(en) aufgenommen: EUVD-2026-40394, EUVD-2026-40413, EUVD-2026-40411"
},
{
"date": "2026-07-01T22:00:00.000+00:00",
"number": "6",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2026-07-21T22:00:00.000+00:00",
"number": "7",
"summary": "Neue Updates von IBM aufgenommen"
}
],
"status": "final",
"version": "7"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "IBM App Connect Enterprise",
"product": {
"name": "IBM App Connect Enterprise",
"product_id": "T052517",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:app_connect_enterprise:-"
}
}
},
{
"category": "product_name",
"name": "IBM Business Automation Workflow",
"product": {
"name": "IBM Business Automation Workflow",
"product_id": "T024465",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:business_automation_workflow:traditional"
}
}
},
{
"category": "product_name",
"name": "IBM License Metric Tool",
"product": {
"name": "IBM License Metric Tool",
"product_id": "T029071",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:license_metric_tool:-"
}
}
},
{
"branches": [
{
"category": "product_version",
"name": "IP Edition",
"product": {
"name": "IBM Tivoli Network Manager IP Edition",
"product_id": "T012578",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:tivoli_network_manager:ip_edition"
}
}
}
],
"category": "product_name",
"name": "Tivoli Network Manager"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c9.0.5.28 PH71706",
"product": {
"name": "IBM WebSphere Application Server \u003c9.0.5.28 PH71706",
"product_id": "T055719"
}
},
{
"category": "product_version",
"name": "9.0.5.28 PH71706",
"product": {
"name": "IBM WebSphere Application Server 9.0.5.28 PH71706",
"product_id": "T055719-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:websphere_application_server:9.0.5.28_ph71706"
}
}
},
{
"category": "product_version_range",
"name": "\u003c9.0.5.29",
"product": {
"name": "IBM WebSphere Application Server \u003c9.0.5.29",
"product_id": "T055720"
}
},
{
"category": "product_version",
"name": "9.0.5.29",
"product": {
"name": "IBM WebSphere Application Server 9.0.5.29",
"product_id": "T055720-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:websphere_application_server:9.0.5.29"
}
}
},
{
"category": "product_version_range",
"name": "\u003c8.5.5.30 PH71706",
"product": {
"name": "IBM WebSphere Application Server \u003c8.5.5.30 PH71706",
"product_id": "T055721"
}
},
{
"category": "product_version",
"name": "8.5.5.30 PH71706",
"product": {
"name": "IBM WebSphere Application Server 8.5.5.30 PH71706",
"product_id": "T055721-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:websphere_application_server:8.5.5.30_ph71706"
}
}
},
{
"category": "product_version_range",
"name": "\u003c8.5.5.31",
"product": {
"name": "IBM WebSphere Application Server \u003c8.5.5.31",
"product_id": "T055722"
}
},
{
"category": "product_version",
"name": "8.5.5.31",
"product": {
"name": "IBM WebSphere Application Server 8.5.5.31",
"product_id": "T055722-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:websphere_application_server:8.5.5.31"
}
}
},
{
"category": "product_version_range",
"name": "\u003c9.0.5.28 PH71757",
"product": {
"name": "IBM WebSphere Application Server \u003c9.0.5.28 PH71757",
"product_id": "T055723"
}
},
{
"category": "product_version",
"name": "9.0.5.28 PH71757",
"product": {
"name": "IBM WebSphere Application Server 9.0.5.28 PH71757",
"product_id": "T055723-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:websphere_application_server:9.0.5.28_ph71757"
}
}
},
{
"category": "product_version_range",
"name": "\u003c8.5.5.29 PH71757",
"product": {
"name": "IBM WebSphere Application Server \u003c8.5.5.29 PH71757",
"product_id": "T055724"
}
},
{
"category": "product_version",
"name": "8.5.5.29 PH71757",
"product": {
"name": "IBM WebSphere Application Server 8.5.5.29 PH71757",
"product_id": "T055724-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:websphere_application_server:8.5.5.29_ph71757"
}
}
},
{
"category": "product_version_range",
"name": "\u003c9.0.5.28 PH71714",
"product": {
"name": "IBM WebSphere Application Server \u003c9.0.5.28 PH71714",
"product_id": "T055725"
}
},
{
"category": "product_version",
"name": "9.0.5.28 PH71714",
"product": {
"name": "IBM WebSphere Application Server 9.0.5.28 PH71714",
"product_id": "T055725-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:websphere_application_server:9.0.5.28_ph71714"
}
}
},
{
"category": "product_version_range",
"name": "\u003c8.5.5.29 PH71714",
"product": {
"name": "IBM WebSphere Application Server \u003c8.5.5.29 PH71714",
"product_id": "T055726"
}
},
{
"category": "product_version",
"name": "8.5.5.29 PH71714",
"product": {
"name": "IBM WebSphere Application Server 8.5.5.29 PH71714",
"product_id": "T055726-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:websphere_application_server:8.5.5.29_ph71714"
}
}
}
],
"category": "product_name",
"name": "WebSphere Application Server"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c26.0.0.6 PH71808",
"product": {
"name": "IBM WebSphere Application Server Liberty \u003c26.0.0.6 PH71808",
"product_id": "T055714"
}
},
{
"category": "product_version",
"name": "26.0.0.6 PH71808",
"product": {
"name": "IBM WebSphere Application Server Liberty 26.0.0.6 PH71808",
"product_id": "T055714-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:websphere_application_server_liberty:26.0.0.6_ph71808"
}
}
},
{
"category": "product_version_range",
"name": "\u003c26.0.0.7",
"product": {
"name": "IBM WebSphere Application Server Liberty \u003c26.0.0.7",
"product_id": "T055715"
}
},
{
"category": "product_version",
"name": "26.0.0.7",
"product": {
"name": "IBM WebSphere Application Server Liberty 26.0.0.7",
"product_id": "T055715-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:websphere_application_server_liberty:26.0.0.7"
}
}
},
{
"category": "product_version_range",
"name": "\u003c26.0.0.6 PH71719",
"product": {
"name": "IBM WebSphere Application Server Liberty \u003c26.0.0.6 PH71719",
"product_id": "T055716"
}
},
{
"category": "product_version",
"name": "26.0.0.6 PH71719",
"product": {
"name": "IBM WebSphere Application Server Liberty 26.0.0.6 PH71719",
"product_id": "T055716-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:websphere_application_server_liberty:26.0.0.6_ph71719"
}
}
},
{
"category": "product_version_range",
"name": "\u003c26.0.0.6 PH71687",
"product": {
"name": "IBM WebSphere Application Server Liberty \u003c26.0.0.6 PH71687",
"product_id": "T055718"
}
},
{
"category": "product_version",
"name": "26.0.0.6 PH71687",
"product": {
"name": "IBM WebSphere Application Server Liberty 26.0.0.6 PH71687",
"product_id": "T055718-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:websphere_application_server_liberty:26.0.0.6_ph71687"
}
}
}
],
"category": "product_name",
"name": "WebSphere Application Server Liberty"
},
{
"category": "product_name",
"name": "IBM WebSphere Service Registry and Repository",
"product": {
"name": "IBM WebSphere Service Registry and Repository",
"product_id": "T048917",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:websphere_service_registry_and_repository:-"
}
}
}
],
"category": "vendor",
"name": "IBM"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-11383",
"product_status": {
"known_affected": [
"T012578",
"T029071",
"T055715",
"T055726",
"T055714",
"T055725",
"T055724",
"T055723",
"T055722",
"T055721",
"T055720",
"T048917",
"T052517",
"T055719",
"T055718",
"T055716",
"T024465"
]
},
"release_date": "2026-06-23T22:00:00.000+00:00",
"title": "CVE-2026-11383"
},
{
"cve": "CVE-2026-11536",
"product_status": {
"known_affected": [
"T012578",
"T029071",
"T055715",
"T055726",
"T055714",
"T055725",
"T055724",
"T055723",
"T055722",
"T055721",
"T055720",
"T048917",
"T052517",
"T055719",
"T055718",
"T055716",
"T024465"
]
},
"release_date": "2026-06-23T22:00:00.000+00:00",
"title": "CVE-2026-11536"
},
{
"cve": "CVE-2026-11541",
"product_status": {
"known_affected": [
"T012578",
"T029071",
"T055715",
"T055726",
"T055714",
"T055725",
"T055724",
"T055723",
"T055722",
"T055721",
"T055720",
"T048917",
"T052517",
"T055719",
"T055718",
"T055716",
"T024465"
]
},
"release_date": "2026-06-23T22:00:00.000+00:00",
"title": "CVE-2026-11541"
},
{
"cve": "CVE-2026-11594",
"product_status": {
"known_affected": [
"T012578",
"T029071",
"T055715",
"T055726",
"T055714",
"T055725",
"T055724",
"T055723",
"T055722",
"T055721",
"T055720",
"T048917",
"T052517",
"T055719",
"T055718",
"T055716",
"T024465"
]
},
"release_date": "2026-06-23T22:00:00.000+00:00",
"title": "CVE-2026-11594"
},
{
"cve": "CVE-2026-11707",
"product_status": {
"known_affected": [
"T012578",
"T029071",
"T055715",
"T055726",
"T055714",
"T055725",
"T055724",
"T055723",
"T055722",
"T055721",
"T055720",
"T048917",
"T052517",
"T055719",
"T055718",
"T055716",
"T024465"
]
},
"release_date": "2026-06-23T22:00:00.000+00:00",
"title": "CVE-2026-11707"
},
{
"cve": "CVE-2026-11806",
"product_status": {
"known_affected": [
"T012578",
"T029071",
"T055715",
"T055726",
"T055714",
"T055725",
"T055724",
"T055723",
"T055722",
"T055721",
"T055720",
"T048917",
"T052517",
"T055719",
"T055718",
"T055716",
"T024465"
]
},
"release_date": "2026-06-23T22:00:00.000+00:00",
"title": "CVE-2026-11806"
},
{
"cve": "CVE-2026-42402",
"product_status": {
"known_affected": [
"T012578",
"T029071",
"T055715",
"T055726",
"T055714",
"T055725",
"T055724",
"T055723",
"T055722",
"T055721",
"T055720",
"T048917",
"T052517",
"T055719",
"T055718",
"T055716",
"T024465"
]
},
"release_date": "2026-06-23T22:00:00.000+00:00",
"title": "CVE-2026-42402"
},
{
"cve": "CVE-2026-42403",
"product_status": {
"known_affected": [
"T012578",
"T029071",
"T055715",
"T055726",
"T055714",
"T055725",
"T055724",
"T055723",
"T055722",
"T055721",
"T055720",
"T048917",
"T052517",
"T055719",
"T055718",
"T055716",
"T024465"
]
},
"release_date": "2026-06-23T22:00:00.000+00:00",
"title": "CVE-2026-42403"
},
{
"cve": "CVE-2026-42404",
"product_status": {
"known_affected": [
"T012578",
"T029071",
"T055715",
"T055726",
"T055714",
"T055725",
"T055724",
"T055723",
"T055722",
"T055721",
"T055720",
"T048917",
"T052517",
"T055719",
"T055718",
"T055716",
"T024465"
]
},
"release_date": "2026-06-23T22:00:00.000+00:00",
"title": "CVE-2026-42404"
}
]
}