Yüksek CVSS 7.5
CVE-2026-4410: Websphere Application Server: denetimsiz kaynak tüketimi
Açıklama (NVD)
IBM WebSphere Application Server - Liberty 19.0.0.7 through 26.0.0.5 and IBM WebSphere Application Server 9.0, and 8.5 and WebSphere Application Server Liberty are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources.
Özet bilgiler
- Ürün
- Ibm Websphere Application Server
- CVSS v3.1
- 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - EPSS
- %0,50 (yüzdelik 43)
- CWE
- CWE-400
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| ibm-websphere-application-server | 8.5.0.0 | 8.5.5.29 | — |
| ibm-websphere-application-server | 9.0.0.0 | 9.0.5.27 | — |
| ibm-websphere-application-server | 19.0.0.7 | 26.0.0.5 | — |