CVE-2025-14923

CWE-321CWE-798 — Hard-coded Credentials4 documents4 sources
Severity
9.8CRITICAL
EPSS
0.0%
top 91.34%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Websphere Application ServerIBM Websphere Application Server - Liberty
Timeline
PublishedMar 3

Description

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.2 IBM WebSphere Application Server Liberty could provide weaker than expected security when using the Security Utility when administering security settings.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.0 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5ibm/websphere_application_server_-_liberty17.0.0.3 — 26.0.0.2
▶NVDibm/websphere_application_server17.0.0.3 — 26.0.0.3

🔴Vulnerability Details

2
CVEList
IBM WebSphere Application Server Liberty could provide weaker than expected security↗2026-03-03
▶
GHSA
GHSA-c6r7-vwx9-8xmh: IBM WebSphere Application Server - Liberty 17↗2026-03-03
▶

🕵️Threat Intelligence

1
Wiz
CVE-2025-14923 Impact, Exploitability, and Mitigation Steps | Wiz↗
▶