Export limit exceeded: 384242 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (500 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-11383 3 Ibm, Linux, Microsoft 7 Aix, I, Tivoli System Automation Application Manager and 4 more 2026-08-18 5.4 Medium
IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by cross-site scripting in the Administrative Console.
CVE-2026-11707 3 Ibm, Linux, Microsoft 7 Aix, I, Tivoli System Automation Application Manager and 4 more 2026-08-18 9.3 Critical
IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by a cross-site scripting vulnerability in the administrative console login page.
CVE-2026-10571 4 Apple, Ibm, Linux and 1 more 9 Macos, Aix, I and 6 more 2026-08-17 5.7 Medium
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of service caused by insecure deserialization. A low-privileged, administrative user could exploit this vulnerability to consume system resources when the restConnector-2.0 feature is enabled.
CVE-2026-14525 4 Apple, Ibm, Linux and 1 more 8 Macos, Aix, I and 5 more 2026-08-17 9.4 Critical
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 IBM WebSphere Application Server Liberty is vulnerable to an authentication bypass when the rtcomm-1.0 or rtcommGateway-1.0 feature is enabled.
CVE-2026-18499 1 Ibm 2 Websphere Application Server, Websphere Application Server Liberty 2026-08-17 8.1 High
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to a privilege escalation when using Liberty collectives.
CVE-2026-9322 1 Ibm 2 Websphere Application Server, Websphere Application Server Liberty 2026-08-12 7.5 High
IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 are vulnerable to a denial of service via a crafted HTTP request.
CVE-2026-15325 1 Ibm 2 Websphere Application Server, Websphere Application Server Liberty 2026-08-06 8.7 High
IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty is vulnerable to HTTP request smuggling due to improper handling of TRACE requests.
CVE-2026-11714 1 Ibm 2 Websphere Application Server, Websphere Application Server Liberty 2026-08-06 8.5 High
IBM WebSphere Application Server Liberty is affected by a server-side request forgery vulnerability with the apiDiscovery-1.0 feature enabled.
CVE-2026-8400 1 Ibm 2 Websphere Application Server, Websphere Application Server Liberty 2026-08-06 8.1 High
IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty Continuous delivery has a flaw in the ORB component in IBM SDK, Java Technology Edition, may allow a malicious IIOP server to induce loading and instantation of arbitrary classes.
CVE-2026-11536 1 Ibm 1 Websphere Application Server 2026-07-30 8.5 High
IBM WebSphere Application Server 9.0, and 8.5 is affected by a remote code execution vulnerability in the SOAP/JMX connector.
CVE-2026-10842 1 Ibm 3 Websphere Application Server, Websphere Application Server Liberty, Websphere Application Server Liberty 2026-07-30 7.5 High
IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 Traditional and Liberty could allow a remote attacker to bypass security constraints.
CVE-2026-14980 1 Ibm 2 Websphere Application Server, Websphere Application Server Liberty 2026-07-30 8.3 High
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to cross-site request forgery which could allow an attacker to perform SSRF attacks with elevated privileges when the collectiveController-1.0 feature is enabled.
CVE-2026-11897 1 Ibm 2 Websphere Application Server, Websphere Application Server Liberty 2026-07-30 7.5 High
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources.
CVE-2026-2482 1 Ibm 2 Websphere Application Server, Websphere Application Server Liberty 2026-07-30 3.1 Low
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
CVE-2026-14976 1 Ibm 3 Websphere Application Server, Websphere Application Server Liberty, Websphere Application Server Liberty 2026-07-30 7.1 High
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by remote code execution with the collectiveController-1.0 feature enabled.
CVE-2026-14529 1 Ibm 2 Websphere Application Server, Websphere Application Server Liberty 2026-07-30 9.4 Critical
IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 traditional is vulnerable to server-side request forgery (SSRF) when the SIP container feature (sipServlet-1.1) is enabled.
CVE-2026-14528 1 Ibm 1 Websphere Application Server 2026-07-29 7.4 High
IBM WebSphere Application Server 9.0, and 8.5 traditional could allow a remote attacker to obtain sensitive information.
CVE-2026-11541 1 Ibm 2 Websphere Application Server, Websphere Application Server Liberty 2026-07-29 7.4 High
IBM CICS Transaction Gateway for Multiplatforms 9.1, 9.2, 9.3, and 10.1 IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are affected by an HTTP request smuggling vulnerability.
CVE-2026-15328 1 Ibm 2 Websphere Application Server, Websphere Application Server Liberty 2026-07-29 7.4 High
IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to HTTP request smuggling.
CVE-2026-14981 1 Ibm 2 Websphere Application Server, Websphere Application Server Liberty 2026-07-29 7.5 High
IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 are affected by a denial of service vulnerability in the HTTP channel due to unbounded allocation of resources without limits.