Security Advisory

CVE-2026-9072

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-22 14:21:35
Last updated 2026-07-09 19:54:37
Assigner ibm
CVSS score 8.1
State PUBLISHED

Description

IBM WebSphere Application Server and IBM WebSphere Application Server Liberty - when using Intelligent Management with the WebSphere WebServer Plug-in component - are vulnerable to remote code execution and denial of service. This vulnerability can be exploited when an attacker impersonates backend servers and sends crafted responses to the plug-in.