3.7Low

CVE-2026-11545IBM WebSphere Application Server is affected by a privilege escalation

IBM WebSphere Application Server Published: (1 month ago)

Description

IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to obtain sensitive information from the administrative console due to missing authorization checks.

Weakness (CWE): CWE-862

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
IBM WebSphere Application Server 8.5, 9.0

References and patches