← Database

CVE-2026-9667

MEDIUM CVSS: 5.3 Published: 2026-09-10 Modified: 2026-09-15

Description

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to server-side request forgery (SSRF) that could allow a remote, unauthenticated attacker to cause the server to send outbound requests to arbitrary endpoints.

Affected Platforms

Ibm Websphere Application Server

Weakness Type

CWE-918

References