IBM WebSphere Traditional V9.x Security Technical Implementation Guide

The IBM WebSphere Traditional V9.x Security Technical Implementation Guide (V2 R2) has 76 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

76STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R2

CurrentPublished Wed Sep 30 2026 What changed in V2R2

The WebSphere Application Server must apply the latest security fixes.

IBM WebSphere Traditional V9.x Security Technical Implementation Guide

Assessment Title

Rule Text

The WebSphere Application Server must apply the latest security fixes.

Description

Discussion Text

Security vulnerabilities are often addressed by testing and applying the latest security patches and fix packs. Latest fixpacks can be found at: http://www-01.ibm.com/support/docview.wss?uid=swg27009661

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-255892

Rule

SV-255892r1265370_rule

Severity

medium

Rule Version

WBSP-AS-001750

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Use the admin console to determine the WebSphere version.

Review patch level and fix pack.

If the most recent patches/fix packs have not been applied, this is a finding.

Implementation Procedure

Fix Text

Obtain WebSphere product security and patch support.

Test and apply the latest applicable WebSphere security fixes.

STIG check 74 of 76 in the IBM WebSphere Traditional V9.x STIG checklist

← Previous · V-255891The WebSphere Application Server must remove organization-defined software components after updated versions have been installed.Next · V-255893 →The WebSphere Application Server must install security-relevant software updates within the time period directed by an authoritative source (e.g., IAVMs, CTOs, DTMs, and STIGs).