[CVE-2026-9072] IBM WebSphere Application Server and IBM WebSphere Application Server Liberty - when using Intellige…

Descripción técnica

IBM WebSphere Application Server and IBM WebSphere Application Server Liberty - when using Intelligent Management with the WebSphere WebServer Plug-in component - are vulnerable to remote code execution and denial of service. This vulnerability can be exploited when an attacker impersonates backend servers and sends crafted responses to the plug-in.

Puntuación CVSS

Score: 8.1/10 — Severidad: HIGH — Estado NIST: Modified

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Productos afectados

I — Ibm

Debilidades (CWE)

CWE-94

Fuente oficial

Publicado en NIST NVD.