Threats affecting pkg:maven/com.ibm.websphere.application.server/liberty

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.4	EPSS 0.3%	CVE-2026-1561IBM WebSphere Application Server Liberty · Server-Side Request Forgery (SSRF) Medium5.4EPSS 0.3%2026-03-25CVE Database V5CVE-2026-1561 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty is vulnerable to server-side request forgery (SSRF). This may allow remote attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. EPSS 0.3%Vulnerability CWE-918	CVE Database V5	2026-03-25
High	7.6	EPSS 0.5%	CVE-2025-14914IBM WebSphere Application Server Liberty · Path Traversal High7.6EPSS 0.5%2026-02-02CVE Database V5CVE-2025-14914 IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.1 could allow a privileged user to upload a zip archive containing path traversal sequences resulting in an overwrite of files leading to arbitrary code execution. EPSS 0.5%Vulnerability CWE-22	CVE Database V5	2026-02-02

Page 1 of 1