IBM WebSphere Application Server 9.0, and 8.5 is affected by blind server-side request forgery when processing SOAP requests. (CVE-2026-15887)
IBM WebSphere Application Server versions 9.0 and 8.5 are affected by a blind server-side request forgery (SSRF) vulnerability when processing SOAP requests. This vulnerability allows an attacker with low privileges to induce the server to make unauthorized requests to internal or external systems without user interaction. The vulnerability has a medium severity rating with a CVSS score of 5.4.
AI Analysis
Technical Summary
CVE-2026-15887 describes a blind server-side request forgery vulnerability in IBM WebSphere Application Server versions 9.0 and 8.5. The flaw occurs during the processing of SOAP requests, enabling an attacker with low privileges to cause the server to send forged requests to other systems. The vulnerability impacts confidentiality and integrity but does not affect availability. No known exploits are reported in the wild, and no patch or remediation information is provided in the available data.
Potential Impact
An attacker with low privileges can exploit this vulnerability to make the server send unauthorized requests to internal or external systems, potentially leading to information disclosure and integrity issues. There is no impact on system availability. No active exploitation has been reported.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. In the absence of an official fix, monitor vendor communications for patches or workarounds specific to this vulnerability. Avoid exposing SOAP endpoints unnecessarily and restrict access to trusted users to reduce risk.
IBM WebSphere Application Server 9.0, and 8.5 is affected by blind server-side request forgery when processing SOAP requests. (CVE-2026-15887)
Description
IBM WebSphere Application Server versions 9.0 and 8.5 are affected by a blind server-side request forgery (SSRF) vulnerability when processing SOAP requests. This vulnerability allows an attacker with low privileges to induce the server to make unauthorized requests to internal or external systems without user interaction. The vulnerability has a medium severity rating with a CVSS score of 5.4.
CVSS v3.1
Score 5.4medium
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-15887 describes a blind server-side request forgery vulnerability in IBM WebSphere Application Server versions 9.0 and 8.5. The flaw occurs during the processing of SOAP requests, enabling an attacker with low privileges to cause the server to send forged requests to other systems. The vulnerability impacts confidentiality and integrity but does not affect availability. No known exploits are reported in the wild, and no patch or remediation information is provided in the available data.
Potential Impact
An attacker with low privileges can exploit this vulnerability to make the server send unauthorized requests to internal or external systems, potentially leading to information disclosure and integrity issues. There is no impact on system availability. No active exploitation has been reported.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. In the absence of an official fix, monitor vendor communications for patches or workarounds specific to this vulnerability. Avoid exposing SOAP endpoints unnecessarily and restrict access to trusted users to reduce risk.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-x739-2h8w-3q46
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-15887"]
- Database Specific Severity
- MODERATE
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6aa8a1c955bf5e2cf5f3e8f2
Added to database: 09/15/2026, 01:39:21 UTC
Last enriched: 09/15/2026, 01:59:51 UTC
Last updated: 09/15/2026, 03:01:22 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.