WaratekVRT Sign in
Reset
More filters (1)
Columns
Product: WebSphere Application Server✕
Overview 12 matches · 2 exploited · 1 CISA KEV · 2 public PoC · 2 EPSS ≥ 0.5
12matches 2exploited16.7% 1CISA KEV8.3% 2public PoC16.7% 2EPSS ≥ 0.516.7%
Protected by Waratek 12 100.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0%
Critical 12 100.0% High 0 0.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 12 100.0% partly blocked 0 0.0% not blocked 0 0.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 2 16.7% Working exploit published 1 8.3% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 9 75.0%
split by peak 4 / year
Protected by Waratek: 12 Critical: 12 blocked by ARMR today: 12 No public exploit: 9Working exploit published: 1Exploited: 2
20161 Protected by Waratek1 Critical1 blocked by ARMR today1 Exploited1 20170 20181 Protected by Waratek1 Critical1 blocked by ARMR today1 No public exploit1 20191 Protected by Waratek1 Critical1 blocked by ARMR today1 Working exploit published1 20203 Protected by Waratek3 Critical3 blocked by ARMR today3 Exploited1 No public exploit2 20210 20220 20231 Protected by Waratek1 Critical1 blocked by ARMR today1 No public exploit1 20240 20251 Protected by Waratek1 Critical1 blocked by ARMR today1 No public exploit1 20264 Protected by Waratek4 Critical4 blocked by ARMR today4 No public exploit4
20162017201820192020202120222023202420252026
12 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2026-8400 Critical 2026-08-05 Protected by Waratek No public exploit IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty Continuous delivery has a flaw in the ORB component in IBM SDK, Java Technology Edition, may allow a malicious IIOP server to induce loading and instantation of arbitrary classes.
CVE-2026-14974 Critical 2026-07-28 Protected by Waratek No public exploit IBM WebSphere Application Server 8.5, and 9.0 traditional could allow a remote attacker to execute arbitrary code caused by unsafe deserialization of untrusted data.
CVE-2026-14512 Critical 2026-07-28 Protected by Waratek No public exploit IBM WebSphere Application Server 9.0, and 8.5 traditional is vulnerable to pre-authentication unsafe deserialization which could allow a remote attacker to bypass authentication or execute arbitrary code.
CVE-2026-9319 Critical 2026-06-01 Protected by Waratek No public exploit IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to potential remote code execution due to deserialization of untrusted data via JAX-WS endpoints with WS-Security.
CVE-2025-36038 Critical 2025-06-25 Protected by Waratek No public exploit IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to execute arbitrary code on the system with a specially crafted sequence of serialized objects.
CVE-2023-27554 Critical 2023-05-11 Protected by Waratek No public exploit IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 249185.
CVE-2020-4589 Critical 2020-08-13 Protected by Waratek No public exploit IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to execute arbitrary code on the system with a specially-crafted sequence of serialized objects from untrusted sources. IBM X-Force ID: 184585.
CVE-2020-4450 Critical 2020-06-05 Protected by Waratek Exploited IBM WebSphere Application Server 8.5 and 9.0 traditional could allow a remote attacker to execute arbitrary code on the system with a specially-crafted sequence of serialized objects. IBM X-Force ID: 181231.
CVE-2020-4448 Critical 2020-06-05 Protected by Waratek No public exploit IBM WebSphere Application Server Network Deployment 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to execute arbitrary code on the system with a specially-crafted sequence of serialized objects from untrusted sources. IBM X-Force ID: 181228.
CVE-2019-4279 Critical 2019-05-17 Protected by Waratek Working exploit published IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to execute arbitrary code on the system with a specially-crafted sequence of serialized objects from untrusted sources. IBM X-Force ID: 160445.
CVE-2018-1851 Critical 2018-10-31 Protected by Waratek No public exploit IBM WebSphere Application Server Liberty OpenID Connect could allow a remote attacker to execute arbitrary code on the system, caused by improper deserialization. By sending a specially-crafted request to the RP service, an attacker could exploit this vulnerability to execute arbitrary code. IBM X-Force ID: 150999.
CVE-2015-7450 Critical 2016-01-02 Protected by Waratek Exploited Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the InvokerTransformer class in the Apache Commons Collections library.