CVE-2026-9006

HIGH · 7.4 CVSS Gepubliceerd: 22-06-2026 CWE-918

Beschrijving

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to server-side request forgery (SSRF) with the Ajax Proxy configured. This may allow an attacker to send unauthorized requests from the system, resulting in a security bypass or information disclosure.

Vendors

Ibm Linux Microsoft

Affected products

Websphere Application Server Aix I Z/os Linux Kernel Windows

References

www.ibm.com