CVE-2026-101117: fallo crítico en IBM WebSphere Extreme Scale
IBM WebSphere eXtremes Scale Liberty deployment is affected by Cross Site Scripting(XSS) attacks.
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
25Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 9.1
IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.2.2 could allow a remote attacker to bypass security restrictions due to improper Content Security Policy configuration.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Productos afectados
IBM · WebSphere Extreme ScaleCVEs relacionadas — IBM WebSphere Extreme Scale
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-13773MEDIUMIBM WebSphere eXtreme Scale is affected by server side request forgery when ORB is used as Transport ProtocolEPSS 6.1%CVE-2026-13759HIGHIBM WebSphere eXtreme Scale is affected by Insecure DeserilizationEPSS 0.5%CVE-2026-13772HIGHIBM WebSphere eXtreme Scale's OQL is affected by remote code executionEPSS 0.5%CVE-2026-9002MEDIUMIBM WebSphere eXtremes Scale is affected by uncontrolled resource consumption when XDF is enabledEPSS 0.3%