Multiple IBM WebSphere Vulnerabilities Enable XSS and Path Traversal Attacks

Cybersecuritynews •Abinaya • July 6, 2026

Multiple vulnerabilities have been disclosed in IBM WebSphere Application Server that could allow attackers to execute cross-site scripting (XSS) attacks and perform path traversal, potentially exposing sensitive data and compromising administrative environments. The issues affect widely deployed versions of WebSphere Application Server 8.5 and 9.0, raising concerns for enterprises relying on the platform for critical […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical XSS and Path Traversal Vulnerabilities in IBM WebSphere Application Server IBM has disclosed critical vulnerabilities in its WebSphere Application Server, specifically CVE-2026-11712, CVE-2026-11595, and CVE-2026-11708, which affect widely used versions 8.5 and 9.0. These vulnerabilities enable cross-site scripting (XSS) and path traversal attacks, potentially allowing attackers to compromise administrative sessions and access sensitive data. The issues were published on June 30, 2026, and pose significant risks to enterprises relying on this platform for critical operations. Organizations are urged to assess their systems for these vulnerabilities and apply necessary mitigations. The vulnerabilities have been confirmed by IBM and are a serious concern for affected users. 2 sources 71

Extracted Entities

Multiple IBM WebSphere Vulnerabilities Enable XSS and Path Traversal Attacks

The full story

Extracted Entities

CWE Weaknesses (2)

Platforms (1)

Vulnerabilities (1)