Vulnerability details

CVE-2026-101117

IBM WebSphere Extreme Scale

IBM WebSphere eXtremes Scale Liberty deployment is affected by Cross Site Scripting(XSS) attacks.

CVSS 3.1

9.1Critical

Remedy

Remedy in the CVE record (record published by: ibm)

IBM strongly recommends addressing the vulnerability now. ProductVersion(s)APARRemediation/First FixIBM WebSphere eXtreme Scale8.6.1.0 - 8.6.2.2PH73641 For older versions, upgrade to latest fixpack 8.6.2.2 and then apply the PH73641 iFix. If you are using 8.6.2.2 directly apply the PH73641 iFix. Recommended Fixes page for WebSphere eXtreme Scale http://www.ibm.com/support/docview.wss

Official description

IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.2.2 could allow a remote attacker to bypass security restrictions due to improper Content Security Policy configuration.

CVSS scores

Score	Version	Source	Vector
9.1Critical	3.1	CVEProject cvelistV5 (CNA) (ibm)	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N`

Affected products

Vendor	Product	Versions	Source
IBM	WebSphere Extreme Scale	8.6.1.0 ≤ v ≤ 8.6.2.2	CVEProject cvelistV5 (CNA)

References and advisories

https://www.ibm.com/support/pages/node/7293764 vendor-advisorypatch

Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published: 2026-11-08
Last updated: 2026-11-09
State: Published
Assigner (CNA): ibm
Kolun priority: 22 · Low

Exploit prediction (EPSS)

0.39%

Probability of exploitation in 30 days

34.6%

Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable: Yes
Exploitation: None
Technical impact: Total

Weaknesses (CWE)

CWE-16
Configuration