Threats tagged 'ghsa-mq4f-p367-w4xc'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.5	EPSS 0.4%	CVE-2026-15634IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty are vulnerable to HTTP Medium6.5EPSS 0.4%2026-09-14GCVE DatabaseCVE-2026-15634 IBM WebSphere Application Server versions 9.0, 8.5, and Liberty are affected by an HTTP request smuggling vulnerability due to improper parsing of the HTTP transfer-encoding header. This flaw allows attackers to send specially crafted requests that can poison web caches, bypass web application firewalls, and facilitate cross-site scripting (XSS) attacks. The vulnerability has a medium severity rating with a CVSS score of 6.5. EPSS 0.4%Report on CVE-2026-15634 Vulnerability CWE-444 #ghsa-mq4f-p367-w4xc	GCVE Database	2026-09-14

Page 1 of 1