CVE-2026-15064
HighCVSS 8.7Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
IBM WebSphere Application Server 9.0, 8.5 and Liberty versions 17.0.0.3 through 26.0.0.7 are vulnerable to HTTP Response Smuggling due to improper handling of non-standard HTTP version tokens.
Risk Assessment
An attacker can exploit this vulnerability to poison proxy caches or hijack user sessions, leading to data confidentiality and integrity breaches.
Recommendation
Apply the security patch provided by IBM for the affected versions of WebSphere Application Server and Liberty.
Other vulnerabilities in IBM WebSphere Application Server
See all- CVE-2017-1382High
IBM WebSphere Application Server versions 7.0, 8.0, 8.5, and 9.0 may create files with default permissions instead of customized ones when custom startup scripts are used. A local attacker could exploit this to gain access to files with an unknown impact.
- CVE-2017-1194High
IBM WebSphere Application Server versions 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site request forgery, which could allow an attacker to execute malicious and unauthorized actions transmitted from a trusted user.
- CVE-2017-1151High
IBM WebSphere Application Server versions 8.0, 8.5, 8.5.5, and 9.0 using OpenID Connect (OIDC) configured with a Trust Association Interceptor (TAI) could allow a user to gain elevated privileges on the system.
- CVE-2016-8919High
IBM WebSphere Application Server may be vulnerable to a denial of service, caused by allowing serialized objects from untrusted sources to run and cause the consumption of resources.
- CVE-2016-5983High
IBM WebSphere Application Server (WAS) versions 7.0 before 7.0.0.43, 8.0 before 8.0.0.13, 8.5 before 8.5.5.11, 9.0 before 9.0.0.2, and Liberty before 16.0.0.4 allows remote authenticated users to execute arbitrary Java code via a crafted serialized object.
- CVE-2016-5986High
IBM WebSphere Application Server (WAS) versions 7.x before 7.0.0.43, 8.0.x before 8.0.0.13, 8.5.x before 8.5.5.11, 9.0.x before 9.0.0.2, and Liberty before 16.0.0.3 mishandles responses, allowing remote attackers to obtain sensitive information via unspecified vectors.
- CVE-2015-1920High
IBM WebSphere Application Server (WAS) versions 6.1 through 6.1.0.47, 7.0 before 7.0.0.39, 8.0 before 8.0.0.11, and 8.5 before 8.5.5.6 allows remote attackers to execute arbitrary code by sending crafted instructions in a management-port session.
- CVE-2014-4764High
IBM WebSphere Application Server (WAS) versions 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.3, when Load Balancer for IPv4 Dispatcher is enabled, allows remote attackers to cause a denial of service (Load Balancer crash) via unspecified vectors.
- CVE-2014-0964High
IBM WebSphere Application Server versions 6.1.0.0 through 6.1.0.47 and 6.0.2.0 through 6.0.2.43 are vulnerable to a denial of service attack that can be executed via crafted TLS traffic.
- CVE-2026-14529Critical
An SSRF vulnerability in IBM WebSphere Application Server 9.0, 8.5, and Liberty 17.0.0.3-26.0.0.8 occurs when the SIP container feature (sipServlet-1.1) is enabled. An attacker can use the server to send requests to internal resources.
Original NVD description (English source)
IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to HTTP Response Smuggling due to improper handling of non-standard HTTP version tokens.