There is a potential denial of service in Apache CXF, which is used by WebSphere Application Server.

A user action is needed to update Liberty for Java for IBM Cloud.

For more information, see the security bulletin.