WebFOCUS vulnerabilities

2 known vulnerabilities in WebFOCUS from Ibi. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  WebFOCUS: Improper Neutralization of CRLF Sequences

  CVE-2026-127036Nov 12, 2026Ibi

  Improper neutralization of CRLF sequences ('CRLF injection') vulnerability in ibi WebFOCUS. This issue affects WebFOCUS: 9.1, from 9.2 through 7, and from 9.3 through 7.

• 9.3 Critical severity

  WebFOCUS: Improper Control of Generation of Code

  CVE-2025-11548Oct 14, 2025Ibi

  A remote, unauthenticated privilege escalation in ibi WebFOCUS allows an attacker to gain administrative access to the application which may lead to unauthenticated Remote Code Execution