CVE-2026-101117

Name of the Vulnerable Software and Affected Versions IBM WebSphere Extreme Scale versions 8.6.1.0 through 8.6.2.2

Description IBM WebSphere Extreme Scale Liberty deployment is susceptible to Cross-Site Scripting (XSS), a flaw where malicious scripts are injected into trusted websites. This issue occurs due to an improper Content Security Policy (CSP) configuration, which allows a remote attacker to bypass security restrictions over the network without requiring authentication or user interaction.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.