IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 is affected by an information disclosure vulnerability due to unsafe class…
IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 is affected by an information disclosure vulnerability due to unsafe class reflection in the JMX REST connector body parser.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- IBM
- Product
- WebSphere Application Server - Liberty
- CVSS v3.1
- 4.3 AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- Weakness
- CWE-470
- Exposure class
- Web platform
- NVD status
- Awaiting Analysis
Why it ranks 23 (Routine)
- CVSS v3.1 4.3 medium
- Product class: web platform
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2026-78636 on this site · NVD · CVE.org · Vulnpedia