← Database

CVE-2025-36038

CRITICAL CVSS: 9.0 Published: 2025-06-25 Modified: 2026-06-17

Description

IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to execute arbitrary code on the system with a specially crafted sequence of serialized objects.

Affected Platforms

Microsoft WindowsOracle SolarisIbm IHp Hp-UxIbm AixIbm Z\/OsLinux Linux KernelIbm Websphere Application Server

Weakness Type

CWE-502

References