VDB

CVE-2025-14914

CVE-2025-14914 PUBLISHED CVSS 7.599999904632568 HIGH

IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.1 could allow a privileged user to upload a zip archive containing path traversal sequences resulting in an overwrite of files leading to arbitrary code execution.

EPSS 0.02% · 3.2th percentile

Risk Scores

CVSS v3.1
7.599999904632568
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
EPSS Score
0.02%
3.2th percentile

Affected Products

VendorProductVersions
ibmwebsphere_application_server17.0.0.3
IBMWebSphere Application Server Liberty17.0.0.3

Timeline

  • Jan 28, 2026 PoC Published
  • Jan 30, 2026 CVE Published
  • Feb 2, 2026 PoC Published
  • Feb 2, 2026 PoC Published
  • Feb 3, 2026 EPSS Score
  • Feb 5, 2026 EPSS Score
  • Feb 7, 2026 EPSS Score
  • Feb 10, 2026 EPSS Score
  • Feb 12, 2026 EPSS Score
  • Feb 13, 2026 PoC Published
  • Feb 14, 2026 EPSS Score
  • Feb 16, 2026 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›