Findings

CVE-2025-14923

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.2 IBM WebSphere Application Server Liberty could provide weaker than expected security when using th…

Published Mar 3, 2026 · updated Jun 17, 2026 · ibm websphere application server

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.2 IBM WebSphere Application Server Liberty could provide weaker than expected security when using the Security Utility when administering security settings.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 3, 2026 · NIST NVD

    Detected

    IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.2 IBM WebSphere Application Server Liberty could provide weaker than expected security when using the Security Utility when administering security settings.

  2. Jun 17, 2026 · NIST NVD

    Updated

    IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.2 IBM WebSphere Application Server Liberty could provide weaker than expected security when using the Security Utility when administering security settings.

Affected

  • cpe ibm/websphere application serverversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2025-14923

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2025-14923

    IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.2 IBM WebSphere Application Server Liberty could provide weaker than expected security when using the Security Utility when administering security settings.

    nvd.nist.gov

References

CVE-2025-14923 · ZeroDay Findings