← Back

Websphere Application Server

websphere_application_server

Vendor: Ibm • 492 CVEs

CVEs (492)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-27268
1Ibm
1Websphere Application Server
Jun 17, 2026
Apr 4, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
IBM WebSphere Application Server Liberty 18.0.0.2 through 24.0.0.4 is vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the serv...Show more
IBM WebSphere Application Server Liberty 18.0.0.2 through 24.0.0.4 is vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 284574.Show less
CVE-2023-50313
1Ibm
1Websphere Application Server
Jun 17, 2026
Apr 2, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security for outbound TLS connections caused by a failure to honor user configuration. IBM X-Force ID: 274812.
CVE-2024-22353
1Ibm
1Websphere Application Server
Jun 17, 2026
Mar 31, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.4 is vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the serv...Show more
IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.4 is vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 280400.Show less
CVE-2024-27270
1Ibm
1Websphere Application Server
Jun 17, 2026
Mar 27, 2024
N/A· v4
6.1 MEDIUM· v3
N/A· v2
IBM WebSphere Application Server Liberty 23.0.0.3 through 24.0.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in a specially crafted URI. IBM X-Force ID: 2...Show more
IBM WebSphere Application Server Liberty 23.0.0.3 through 24.0.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in a specially crafted URI. IBM X-Force ID: 284576.Show less
CVE-2023-50312
1Ibm
1Websphere Application Server
Jun 17, 2026
Mar 1, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.2 could provide weaker than expected security for outbound TLS connections caused by a failure to honor user configuration. IBM X-Force ID: 274711.
CVE-2023-38737
1Ibm
1Websphere Application Server
Jun 17, 2026
Aug 16, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
IBM WebSphere Application Server Liberty 22.0.0.13 through 23.0.0.7 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the ser...Show more
IBM WebSphere Application Server Liberty 22.0.0.13 through 23.0.0.7 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 262567.Show less
CVE-2023-35890
1Ibm
1Websphere Application Server
Jun 17, 2026
Jul 7, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security, caused by the improper encoding in a local configuration file. IBM X-Force ID: 258637.
CVE-2023-27554
1Ibm
1Websphere Application Server
Jun 17, 2026
May 11, 2023
N/A· v4
9.1 CRITICAL· v3
N/A· v2
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or...Show more
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 249185. Show less
CVE-2022-39161
1Ibm
1Websphere Application Server
Jun 17, 2026
May 3, 2023
N/A· v4
5.3 MEDIUM· v3
N/A· v2
IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0, and IBM WebSphere Application Server Liberty, when configured to communicate with the Web Server Plug-ins for IBM WebSphere Application Server, could allow an authenti...Show more
IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0, and IBM WebSphere Application Server Liberty, when configured to communicate with the Web Server Plug-ins for IBM WebSphere Application Server, could allow an authenticated user to conduct spoofing attacks. A man-in-the-middle attacker could exploit this vulnerability using a certificate issued by a trusted authority to obtain sensitive information. IBM X-Force ID: 235069.Show less
CVE-2023-30441
1Ibm
4Infosphere Information Server
JavaWebsphere Application Server+1 more
Jun 17, 2026
Apr 29, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0 through 8.0.7.11 components could expose sensitive information using a combination of flaws and configurations. IBM X-Force ID: 253188.
CVE-2023-24966
1Ibm
1Websphere Application Server
Jun 17, 2026
Apr 27, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially le...Show more
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 246904.Show less
CVE-2023-26283
1Ibm
1Websphere Application Server
Jun 17, 2026
Apr 2, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
IBM WebSphere Application Server 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to...Show more
IBM WebSphere Application Server 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 248416.Show less
CVE-2023-23477
1Ibm
1Websphere Application Server
Jun 17, 2026
Feb 3, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
IBM WebSphere Application Server 8.5 and 9.0 traditional could allow a remote attacker to execute arbitrary code on the system with a specially crafted sequence of serialized objects. IBM X-Force ID: 245513.
CVE-2022-43917
1Ibm
1Websphere Application Server
Jun 17, 2026
Jan 26, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
IBM WebSphere Application Server 8.5 and 9.0 traditional container uses weaker than expected cryptographic keys that could allow an attacker to decrypt sensitive information. This affects only the containerized version...Show more
IBM WebSphere Application Server 8.5 and 9.0 traditional container uses weaker than expected cryptographic keys that could allow an attacker to decrypt sensitive information. This affects only the containerized version of WebSphere Application Server traditional. IBM X-Force ID: 241045. Show less
CVE-2022-40750
1Ibm
1Websphere Application Server
Jun 17, 2026
Nov 11, 2022
N/A· v4
5.4 MEDIUM· v3
N/A· v2
IBM WebSphere Application Server 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially l...Show more
IBM WebSphere Application Server 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 236588.Show less
CVE-2022-38712
1Ibm
1Websphere Application Server
Jun 17, 2026
Nov 3, 2022
N/A· v4
5.9 MEDIUM· v3
N/A· v2
"IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Web services could allow a man-in-the-middle attacker to conduct SOAPAction spoofing to execute unwanted or unauthorized operations. IBM X-Force ID: 234762."
CVE-2022-35282
1Ibm
1Websphere Application Server
Jun 17, 2026
Sep 28, 2022
N/A· v4
6.5 MEDIUM· v3
N/A· v2
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to server-side request forgery (SSRF). By sending a specially crafted request, an attacker with local network access could exploit this vulnerability...Show more
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to server-side request forgery (SSRF). By sending a specially crafted request, an attacker with local network access could exploit this vulnerability to obtain sensitive data.Show less
CVE-2022-34336
1Ibm
1Websphere Application Server
Jun 17, 2026
Sep 13, 2022
N/A· v4
5.4 MEDIUM· v3
N/A· v2
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality pot...Show more
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 229714.Show less
CVE-2022-34165
1Ibm
1Websphere Application Server
Jun 17, 2026
Sep 9, 2022
N/A· v4
5.4 MEDIUM· v3
N/A· v2
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.9 are vulnerable to HTTP header injection, caused by improper validation. This could allow an a...Show more
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.9 are vulnerable to HTTP header injection, caused by improper validation. This could allow an attacker to conduct various attacks against the vulnerable system, including cache poisoning and cross-site scripting. IBM X-Force ID: 229429.Show less
CVE-2022-22477
1Ibm
1Websphere Application Server
Jun 17, 2026
Jul 14, 2022
N/A· v4
6.1 MEDIUM· v3
N/A· v2
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially le...Show more
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 225605.Show less