Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| IBM | WebSphere Application Server | affected |
|
Configuration 1 [-]
|
No data.
OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.
| Vendors | Products |
|---|---|
|
Ibm
Subscribe
|
Websphere Application Server
Subscribe
|
No advisories yet.
Solution
IBM strongly recommends addressing the vulnerability now by applying a currently available interim fix or fix pack that contains the fix for APAR PH68976. Attention: After installing the interim fix or fixpack, please follow the additional instructions provided in the interim fix link referenced below to complete the remediation. For IBM WebSphere Application Server traditional: For V9.0.0.0 through 9.0.5.26: · Upgrade to minimal fix pack levels as required by the interim fix and then apply the Interim Fix that resolves PH68976 https://www.ibm.com/support/pages/node/7260117 and carefully follow the instructions for steps required after fix installation. --OR-- · Apply Fix Pack 9.0.5.27 or later (targeted availability 1Q2026) and carefully follow the instructions in PH68976 https://www.ibm.com/support/pages/node/7260117 for steps required after fixpack installation. For V8.5.0.0 through 8.5.5.29: · Upgrade to minimal fix pack levels as required by the interim fix and then apply the Interim Fix that resolves PH68976 https://www.ibm.com/support/pages/node/7260117 and carefully follow the instructions for steps required after fix installation. --OR-- · Apply Fix Pack 8.5.5.30 or later (targeted availability 3Q2026) and carefully follow the instructions in PH68976 https://www.ibm.com/support/pages/node/7260117 for steps required after fixpack installation. Additional interim fixes may be available and linked off the interim fix download page.
Workaround
No workaround given by the vendor.
| Link | Providers |
|---|---|
| https://www.ibm.com/support/pages/node/7260217 |
|
Fri, 20 Feb 2026 17:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:2.3:a:ibm:websphere_application_server:8.5.0.0:*:*:*:-:*:*:* cpe:2.3:a:ibm:websphere_application_server:9.0.0.0:*:*:*:-:*:*:* |
Wed, 18 Feb 2026 21:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Tue, 17 Feb 2026 23:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | IBM WebSphere Application Server 9.0, and 8.5 could provide weaker than expected security during system administration of security settings. | |
| Title | IBM WebSphere Application Server could provide weaker than expected security | |
| First Time appeared |
Ibm
Ibm websphere Application Server |
|
| Weaknesses | CWE-358 | |
| CPEs | cpe:2.3:a:ibm:websphere_application_server:8.5.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_application_server:8.5:*:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_application_server:9.0.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:websphere_application_server:9.0:*:*:*:*:*:*:* |
|
| Vendors & Products |
Ibm
Ibm websphere Application Server |
|
| References |
| |
| Metrics |
cvssV3_1
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: ibm
Published:
Updated: 2026-02-18T20:41:58.252Z
Reserved: 2025-11-17T19:53:28.144Z
Link: CVE-2025-13333
Vulnrichment
Updated: 2026-02-18T20:41:54.952Z
NVD
Status : Analyzed
Published: 2026-02-17T23:16:18.150
Modified: 2026-02-20T16:49:01.233
Link: CVE-2025-13333
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-02-18T10:33:06Z