Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2026-4410

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ibm

Description

IBM WebSphere Application Server - Liberty 19.0.0.7 through 26.0.0.5 and IBM WebSphere Application Server 9.0, and 8.5 and WebSphere Application Server Liberty are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM WebSphere Application Server - Liberty

  • 19.0.0.7 to ≤ 26.0.0.5affected

IBM WebSphere Application Server

  • 9.0affected
  • 8.5affected

References