← CVE Intelligence

CVE-2025-14914

IBM WebSphere Application Server Liberty Path Traversal PUBLISHED

Description (CNA)

IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.1 could allow a privileged user to upload a zip archive containing path traversal sequences resulting in an overwrite of files leading to arbitrary code execution.

Affected (CNA)

Vendor / productVersions
IBM / WebSphere Application Server Libertyaffected 17.0.0.3 through 26.0.0.1

CWE

CWE-22

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.