Authors: Created by IBM

IBM WebSphere Application Server Liberty is affected by a denial of service with the jsonp-2.1 feature enabled. CVEID:  CVE-2026-9563^[1]
DESCRIPTION:  In Eclipse Parsson published Maven Central artifacts before version 1.1.8, the JSON parser did not enforce a default maximum on the number of characters consumed while parsing a single JSON document.Applications that parse attacker- controlled JSON can be forced to consume excessive CPU and memory...

Just published by IBM: Read more

Authors: Created by IBM

IBM WebSphere Application Server is affected by a cross-site request forgery vulnerability when using the Administrative Console. CVEID:  CVE-2026-8408^[1]
DESCRIPTION:  IBM WebSphere Application Server is affected by a cross-site request forgery, caused by improper validation of user-supplied input to the Administrative Console.By persuading an authenticated, privileged user to visit a malicious URL during a limited timing window, a remote attacker could send a specially-crafted request...

Just published by IBM: Read more

Authors: Created by IBM

File link	File size	File description

...

Just published by IBM: Read more

Authors: Created by IBM

IBM WebSphere Application Server Liberty is vulnerable to a denial of service with the servlet-3.1, servlet-4.0, servlet-5.0, or servlet-6.0 feature with the HTTP/2 protocol enabled. CVEID:  CVE-2024-27268^[1]
DESCRIPTION:  IBM WebSphere Application Server Liberty is vulnerable to a denial of service, caused by sending a specially crafted request.A remote attacker could exploit this vulnerability to cause the server to consume memory resources.
CVSS Base score:...

Just published by IBM: Read more

Authors: Created by IBM

File link	File size	File description

...

Just published by IBM: Read more