PH71756:IBM WEBSPHERE APPLICATION SERVER IS AFFECTED BY MULTIPLE VULNERABILITIES (CVE-2026-11712, CVE-2026-11595, CVE-2026-11708)

Installation Instructions

IMPORTANT

Manual action is required after applying PH71756 interim fixes on WebSphere Application Server 8.5.5.x. This action must be performed on the system that has the WebSphere Administrative Console deployed (such as standalone servers or deployment managers).  No action is required on WebSphere Application Server 9.0.5.x.

You must complete these steps before starting the server. If the server has already been started, stop the server before continuing the steps below.

1. Determine the profile name, node name, and server name where the WebSphere Administrative Console (isclite.ear) is deployed to be substituted in the paths below.
2. Save the contents of the iehs.war directory under WAS_HOME/profiles/profile_name/temp/node_name/server_name/isclite/
   • Zip up the contents of iehs.war and move the zip file to another directory(outside of the WAS installation). This will serve as a backup.
3. Update the isclite.ear application using wsadmin

   • Invoke wsadmin from the WAS_HOME/profiles/profile_name/bin directory:

     wsadmin -lang jython -conntype none

   • In wsadmin run the following command, replacing WAS_HOME with the correct path before running the AdminApp.update command

     props='[-operation update -contents WAS_HOME/systemApps/isclite.ear/iehs.war -contenturi iehs.war -MapWebModToVH [[iehs.war iehs.war,WEB-INF/web.xml admin_host]]]'
     AdminApp.update('isclite', 'modulefile', props)
     AdminConfig.save()

4. Delete the iehs.war directory under WAS_HOME/profiles/profile_name/temp/node_name/server_name/isclite
5. Start the server