Known vulnerabilities in WebSphere Remote Server - page 3

Vendor: IBM Corporation
Software: WebSphere Remote Server
Software CPE: cpe:2.3:a:ibm_corporation:websphere_remote_server:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 210
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting WebSphere Remote Server WebSphere Remote Server is affected by 210 known vulnerabilities: 2 critical, 23 high, 114 medium, 71 low Critical High Medium Low

Vulnerabilities (210)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU122746 - Improper Neutralization of Special Elements in Data Query Logic
CVE-2025-14689		 CWE-943 Medium
No
No
 - 12.02.2026 SB2026021207
SB2026021213
SB2026021215
and 5 more
#VU119901 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-12635		 CWE-79 Medium
No
No
 - 12.12.2025 SB2025121283
SB2025121517
SB2025121518
and 42 more
#VU119149 - Improper Neutralization of Server-Side Includes (SSI) Within a Web Page
CVE-2025-58098		 CWE-97 Low
Available
No
 - 04.12.2025 SB2025120441
SB2025121923
SB2025121940
and 47 more
#VU119148 - Server-Side Request Forgery (SSRF)
CVE-2025-59775		 CWE-918 Medium
No
No
 - 04.12.2025 SB2025120441
SB2026010820
SB20260114117
and 11 more
#VU119147 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2025-65082		 CWE-74 Low
No
No
 - 04.12.2025 SB2025120441
SB2025121923
SB2025122202
and 33 more
#VU119146 - Improper input validation
CVE-2025-66200		 CWE-20 Low
No
No
 - 04.12.2025 SB2025120441
SB2025121923
SB2025122202
and 31 more
#VU116602 - Allocation of Resources Without Limits or Throttling
CVE-2025-36099		 CWE-770 Low
No
No
 - 06.10.2025 SB2025100614
SB2025100616
SB2025100618
and 14 more
#VU115751 - Resource exhaustion
CVE-2025-59375		 CWE-400 Medium
No
No
 - 17.09.2025 SB2025091783
SB2025091789
SB2025091790
and 107 more
#VU114346 - Command injection
CVE-2025-7962		 CWE-77 Medium
No
No
 - 21.08.2025 SB2025082145
SB2025082146
SB2025082147
and 54 more
#VU114097 - Improper Certificate Validation
CVE-2025-33142		 CWE-295 Medium
No
No
 - 15.08.2025 SB2025081504
SB2025081894
SB2025081911
and 14 more
#VU113185 - Expected Behavior Violation
CVE-2025-54090		 CWE-440 Medium
No
No
 - 23.07.2025 SB2025072350
SB2025080808
SB2025081113
and 9 more
#VU113085 - Interpretation Conflict
CVE-2024-56339		 CWE-436 Medium
No
No
 - 21.07.2025 SB2025072116
SB2025072130
SB2025072305
and 45 more
#VU113074 - Stack-based buffer overflow
CVE-2025-36097		 CWE-121 High
No
No
 - 18.07.2025 SB20250718100
SB2025072128
SB2025072307
and 43 more
#VU112734 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2024-42516		 CWE-113 Low
No
No
 - 10.07.2025 SB2025071040
SB2025071710
SB2025071764
and 35 more
#VU112733 - Server-Side Request Forgery (SSRF)
CVE-2024-43204		 CWE-918 Low
No
No
 - 10.07.2025 SB2025071040
SB2025071710
SB2025071764
and 28 more
#VU112732 - Server-Side Request Forgery (SSRF)
CVE-2024-43394		 CWE-918 Medium
No
No
 - 10.07.2025 SB2025071040
SB2025071710
SB2025072111
and 8 more
#VU111988 - Deserialization of Untrusted Data
CVE-2025-36038		 CWE-502 Critical
No
No
 - 27.06.2025 SB2025062708
SB2025063083
SB2025070944
and 14 more
#VU111162 - Resource exhaustion
CVE-2025-48976		 CWE-400 Medium
Available
No
 - 16.06.2025 SB2025061634
SB2025061635
SB2025061927
and 156 more
#VU107856 - Server-Side Request Forgery (SSRF)
CVE-2025-27907		 CWE-918 Medium
No
No
 - 23.04.2025 SB2025042309
SB2025042318
SB2025042345
and 11 more
#VU104172 - Uncontrolled Memory Allocation
CVE-2024-45663		 CWE-789 Medium
No
No
 - 25.02.2025 SB2025022520
SB2025022521
SB2025031921
and 6 more


Showing elements 41 - 60 out of 210