CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-36000

IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.8 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 4.9%

CVSS Severity

CVSS v3 Score 4.4

References

https://www.ibm.com/support/pages/node/7242026

Products affected by CVE-2025-36000

Ibm » Websphere Application Server » Version: 17.0.0.3

cpe:2.3:a:ibm:websphere_application_server:17.0.0.3
Ibm » Websphere Application Server » Version: 17.0.0.4

cpe:2.3:a:ibm:websphere_application_server:17.0.0.4
Ibm » Websphere Application Server » Version: 18.0.0.1

cpe:2.3:a:ibm:websphere_application_server:18.0.0.1
Ibm » Websphere Application Server » Version: 18.0.0.2

cpe:2.3:a:ibm:websphere_application_server:18.0.0.2
Ibm » Websphere Application Server » Version: 18.0.0.3

cpe:2.3:a:ibm:websphere_application_server:18.0.0.3
Ibm » Websphere Application Server » Version: 18.0.0.4

cpe:2.3:a:ibm:websphere_application_server:18.0.0.4
Ibm » Websphere Application Server » Version: 19.0.0.1

cpe:2.3:a:ibm:websphere_application_server:19.0.0.1
Ibm » Websphere Application Server » Version: 19.0.0.10

cpe:2.3:a:ibm:websphere_application_server:19.0.0.10
Ibm » Websphere Application Server » Version: 19.0.0.11

cpe:2.3:a:ibm:websphere_application_server:19.0.0.11
Ibm » Websphere Application Server » Version: 19.0.0.12

cpe:2.3:a:ibm:websphere_application_server:19.0.0.12
Ibm » Websphere Application Server » Version: 19.0.0.2

cpe:2.3:a:ibm:websphere_application_server:19.0.0.2
Ibm » Websphere Application Server » Version: 19.0.0.3

cpe:2.3:a:ibm:websphere_application_server:19.0.0.3
Ibm » Websphere Application Server » Version: 19.0.0.4

cpe:2.3:a:ibm:websphere_application_server:19.0.0.4
Ibm » Websphere Application Server » Version: 19.0.0.5

cpe:2.3:a:ibm:websphere_application_server:19.0.0.5
Ibm » Websphere Application Server » Version: 19.0.0.6

cpe:2.3:a:ibm:websphere_application_server:19.0.0.6
Ibm » Websphere Application Server » Version: 19.0.0.7

cpe:2.3:a:ibm:websphere_application_server:19.0.0.7
Ibm » Websphere Application Server » Version: 19.0.0.8

cpe:2.3:a:ibm:websphere_application_server:19.0.0.8
Ibm » Websphere Application Server » Version: 19.0.0.9

cpe:2.3:a:ibm:websphere_application_server:19.0.0.9
Ibm » Websphere Application Server » Version: 20.0.0.1

cpe:2.3:a:ibm:websphere_application_server:20.0.0.1
Ibm » Websphere Application Server » Version: 20.0.0.10

cpe:2.3:a:ibm:websphere_application_server:20.0.0.10
Ibm » Websphere Application Server » Version: 20.0.0.11

cpe:2.3:a:ibm:websphere_application_server:20.0.0.11
Ibm » Websphere Application Server » Version: 20.0.0.12

cpe:2.3:a:ibm:websphere_application_server:20.0.0.12
Ibm » Websphere Application Server » Version: 20.0.0.2

cpe:2.3:a:ibm:websphere_application_server:20.0.0.2
Ibm » Websphere Application Server » Version: 20.0.0.3

cpe:2.3:a:ibm:websphere_application_server:20.0.0.3
Ibm » Websphere Application Server » Version: 20.0.0.4

cpe:2.3:a:ibm:websphere_application_server:20.0.0.4
Ibm » Websphere Application Server » Version: 20.0.0.5

cpe:2.3:a:ibm:websphere_application_server:20.0.0.5
Ibm » Websphere Application Server » Version: 20.0.0.6

cpe:2.3:a:ibm:websphere_application_server:20.0.0.6
Ibm » Websphere Application Server » Version: 20.0.0.7

cpe:2.3:a:ibm:websphere_application_server:20.0.0.7
Ibm » Websphere Application Server » Version: 20.0.0.8

cpe:2.3:a:ibm:websphere_application_server:20.0.0.8
Ibm » Websphere Application Server » Version: 20.0.0.9

cpe:2.3:a:ibm:websphere_application_server:20.0.0.9
Ibm » Websphere Application Server » Version: 21.0.0.1

cpe:2.3:a:ibm:websphere_application_server:21.0.0.1
Ibm » Websphere Application Server » Version: 21.0.0.10

cpe:2.3:a:ibm:websphere_application_server:21.0.0.10
Ibm » Websphere Application Server » Version: 21.0.0.12

cpe:2.3:a:ibm:websphere_application_server:21.0.0.12
Ibm » Websphere Application Server » Version: 21.0.0.2

cpe:2.3:a:ibm:websphere_application_server:21.0.0.2
Ibm » Websphere Application Server » Version: 21.0.0.3

cpe:2.3:a:ibm:websphere_application_server:21.0.0.3
Ibm » Websphere Application Server » Version: 21.0.0.4

cpe:2.3:a:ibm:websphere_application_server:21.0.0.4
Ibm » Websphere Application Server » Version: 21.0.0.5

cpe:2.3:a:ibm:websphere_application_server:21.0.0.5
Ibm » Websphere Application Server » Version: 22.0.0.1

cpe:2.3:a:ibm:websphere_application_server:22.0.0.1
Ibm » Websphere Application Server » Version: 22.0.0.5

cpe:2.3:a:ibm:websphere_application_server:22.0.0.5
Ibm » Websphere Application Server » Version: 22.0.0.6

cpe:2.3:a:ibm:websphere_application_server:22.0.0.6
Ibm » Websphere Application Server » Version: 23.0.0.3

cpe:2.3:a:ibm:websphere_application_server:23.0.0.3
Ibm » Websphere Application Server » Version: 24.0.0.3

cpe:2.3:a:ibm:websphere_application_server:24.0.0.3
Ibm » Websphere Application Server » Version: 24.0.0.4

cpe:2.3:a:ibm:websphere_application_server:24.0.0.4
Ibm » Websphere Application Server » Version: 24.0.0.5

cpe:2.3:a:ibm:websphere_application_server:24.0.0.5
Ibm » Websphere Application Server » Version: 24.0.0.6

cpe:2.3:a:ibm:websphere_application_server:24.0.0.6

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-36000

Products

Pricing

Contact Us