Vulnerability Database

296,138

Total vulnerabilities in the database

CVE-2025-36038

IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to execute arbitrary code on the system with a specially crafted sequence of serialized objects.

  • Published: Jun 25, 2025
  • Updated: Jun 26, 2025
  • CVE: CVE-2025-36038
  • Severity: Critical
  • Exploit:

CVSS v3:

  • Severity: Critical
  • Score: 9.8
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWEs:

OWASP TOP 10:

Software From Fixed in
ibm / websphere_application_server 8.5 8.5.5.28
ibm / websphere_application_server 9.0 9.0.5.25