Ein Angreifer kann mehrere Schwachstellen in IBM WebSphere Application Server Liberty und IBM WebSphere Application Server ausnutzen, um beliebigen Programmcode auszuführen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen.
[UPDATE] [hoch] IBM WebSphere Application Server und Application Server Liberty: Mehrere Schwachstellen
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2026-10-05 10:15 UTC
- Importiert: 2026-10-06 09:26 UTC
- Quelle-ID:
cert_bund - uid_hash:
b1df68e11eb9ed1987075144b3e2bbd71cef6644fbe9a63367c28675ba3f784a
Inhalt
Verknuepfte CVEs
| CVE-ID | Severity (Quelle) | CVSS (Quelle) | Severity (CVE.org) | CVSS (CVE.org) | EPSS | EPSS-Pctl | Veroeffentlicht (CVE.org) |
|---|---|---|---|---|---|---|---|
HIGH |
CRITICAL |
9.8 |
2026-07-28 |
||||
HIGH |
CRITICAL |
9.8 |
2026-07-28 |
||||
HIGH |
MEDIUM |
6.1 |
2026-07-28 |
||||
HIGH |
HIGH |
7.4 |
2026-07-28 |
||||
HIGH |
CRITICAL |
9.4 |
2026-07-29 |
||||
HIGH |
HIGH |
8.1 |
2026-07-28 |
||||
HIGH |
HIGH |
7.1 |
2026-07-28 |
||||
HIGH |
HIGH |
8.3 |
2026-07-30 |
||||
HIGH |
HIGH |
7.5 |
2026-07-28 |
||||
HIGH |
HIGH |
8.7 |
2026-07-28 |
||||
HIGH |
HIGH |
7.5 |
2026-07-28 |
||||
HIGH |
HIGH |
8.7 |
2026-07-28 |
||||
HIGH |
HIGH |
7.4 |
2026-07-28 |
||||
HIGH |
HIGH |
7 |
2026-07-28 |
||||
HIGH |
HIGH |
7.1 |
2026-07-28 |
||||
HIGH |
LOW |
3.1 |
2026-07-29 |
Externe Referenzen
| Bezeichnung | Typ | CVE | Quelle |
|---|---|---|---|
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf | |
| EXTERNAL | - | wid_csaf |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| CERT-Bund (BSI) | government_cert | - | de | https://wid.cert-bund.de/content/public/securityAdvisory/rss |