Volerion logoVolerion
Volerion logoVolerion

IBM WebSphere Application Server Liberty Server-Side Request Forgery Vulnerability

Vulnerability

A server-side request forgery (SSRF) vulnerability has been identified in IBM WebSphere Application Server Liberty versions 17.0.0.3 prior to 26.0.0.3, with the samlWeb-2.0 feature enabled. This vulnerability allows remote attackers to send unauthorized requests from the server, which could lead to network enumeration or facilitate other types of attacks.

Impact

Exploitation of this vulnerability could allow remote attackers to send unauthorized requests from the server, potentially leading to network enumeration or other attacks.

Remediation

Users are advised to upgrade to IBM WebSphere Application Server Liberty Fix Pack 26.0.0.4 or later, or to apply the Interim Fix that resolves APAR PH70017. Additional interim fixes may be available and linked off the interim fix download page.

Added: Mar 25, 2026, 10:05 PM
Updated: Mar 25, 2026, 10:05 PM

Vulnerability Rating

Custom Algorithm
spread
5.2
impact
0.6
exploitability
4.8
remediation
7.7
relevance
4.7
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.