Zurück zur CVE-Übersicht
CVE-2026-14980
HIGH(8.3)CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L
Risk Signal Score21/100 — NIEDRIG
- CVSS 8.3 — Hoch
EPSS-Score
0.4%
Exploit-Wahrscheinlichkeit (30 Tage)
CVSS Score
8.3
Technische Schwere
Beschreibung
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to cross-site request forgery which could allow an attacker to perform SSRF attacks with elevated privileges when the collectiveController-1.0 feature is enabled.
Betroffene Produkte
- cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:liberty:*:*:*