CVE-2025-14923Disclosure(ibm / websphere_application_server)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.2 IBM WebSphere Application Server Liberty could provide weaker than expected security when using the Security Utility when administering security settings.

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-321CWE-798

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • websphere_application_server

Threat summary

  • 4 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 3 classified signals
  • General: 1 classified signal
  • Peaked 2d ago at 2 mentions (2026-02-25); latest day: 1
  • 4 total mentions across 3 days

Affected systems

Vendors
Products
websphere_application_server

Deep dive

Activity timeline4 mentions / 3d
01122Mentions · 2026-02-25: 2Mentions · 2026-03-03: 1Mentions · 2026-03-04: 1Technical Details · 2026-02-25: 102-2503-0303-04
Signal classification2 categories
Disclosure
375.0%
General
125.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-02-252
Disclosure2
2026-03-031
General1
2026-03-041
Disclosure1
Full discourse4 posts
  • CVE@CVEnew
    General

    CVE-2025-14923 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.2 IBM WebSphere Application Server Liberty could provide weaker than expected security when using t… https://www.cve.org/CVERecord?id=CVE-2025-14923

    Post summary

    The statement highlights a potential security weakness in IBM WebSphere Application Server Liberty, but provides no additional technical details, PoC, exploit, or remediation information.

    00001189
    56.6K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2025-14923 Security Utility Weakness in IBM WebSphere Application Server Liberty 17.0.0.3-26.0.0.2 https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-14923

    Post summary

    A new vulnerability, CVE-2025-14923, has been identified in IBM WebSphere Application Server Liberty versions 17.0.0.3 through 26.0.0.2, labeled as a security utility weakness, with details available via the provided link.

    0000089
    4.0K followersView on X
  • Matthias Knäpper@knaepp
    Disclosure

    PH69658:IBM WebSphere Application Server Liberty could provide weaker than expected security (CVE-2025-14923 CVSS 4.7) https://tinyurl.com/2257jlsy

    Post summary

    IBM WebSphere Application Server Liberty has a CVE-2025-14923 vulnerability with a CVSS score of 4.7, indicating weaker than expected security.

    0000036
    108 followersView on X
  • Matthias Knäpper@knaepp
    Disclosure

    IBM WebSphere Application Server Liberty could provide weaker than expected security (CVE-2025-14923) https://tinyurl.com/2dynd8pw

    Post summary

    The post announces a potential security weakness in IBM WebSphere Application Server Liberty identified as CVE-2025-14923, but provides no further technical details or evidence of exploitation.

    0000040
    108 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appibmwebsphere_application_server---

Explore more