CVE-2025-36099

published 2025-09-29

CVE-2025-36099: IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to a denial of service, caused by sending a specially-crafted request. A privileged user could…

medium 4.9 CVSS 3.1

AV N AC L PR H UI N S U C N I N A H

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to a denial of service, caused by sending a specially-crafted request. A privileged user could exploit this vulnerability to cause the server to consume memory resources.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
ibm	websphere_application_server	—	—
ibm	websphere_application_server	—	—
ibm	websphere_application_server	—	—
ibm	websphere_application_server	—	—

CWE-770