CVE-2026-14974

IBM WebSphere Application Server is affected by cross-site scripting and deserialization vulnerabilities PUBLISHED

Description (CNA)

IBM WebSphere Application Server 8.5, and 9.0 traditional could allow a remote attacker to execute arbitrary code caused by unsafe deserialization of untrusted data.

Affected (CNA)

Vendor / product	Versions
IBM / WebSphere Application Server	affected 8.5; affected 9.0

CWE

CWE-502

References

https://www.ibm.com/support/pages/node/7281641

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.