8.3
Élevée
CVE-2026-14980 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to cross-site request forgery which…
Description
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to cross-site request forgery which could allow an attacker to perform SSRF attacks with elevated privileges when the collectiveController-1.0 feature is enabled.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WebSphere Application Server - Liberty 17.0 | 17.0.0.3 → 26.0.0.8 | Pas de correctif indiqué |
Autres CVE de WebSphere Application Server - Liberty
Les 56 CVE de WebSphere Application Server - Liberty →
CVE-2026-11547
IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilities
4.3
Moyenne
CVE-2026-10844
IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilities
4.3
Moyenne
CVE-2026-108284
IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilities
6.5
Moyenne
CVE-2026-103320
IBM WebSphere Application Server Liberty prior to 26.0.0.11 is affected by multiple vulnerabilities
4.3
Moyenne