Vulnerabilities

IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 could allow an authenticated user with the Reader role to obtain sensitive…

IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 could allow an authenticated user with the Reader role to obtain sensitive information.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

IBM

Product

WebSphere Application Server - Liberty

CVSS v3.1

6.5 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness

CWE-200

Exposure class

Web platform

NVD status

Awaiting Analysis

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-108284 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 23
   CVE NVD 2h ago

   IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 could allow an authenticated user with the Reader role to obtain sensitive…

   CVSS 4.3 CVE-2026-103320 IBM