5.0
Medium
CVE-2022-22476 IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.7 and Open Liberty are vulnerable to identity…
Description
IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.7 and Open Liberty are vulnerable to identity spoofing by an authenticated user using a specially crafted request. IBM X-Force ID: 225604.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WebSphere Application Server Liberty | 22.0.0.7 | No fix stated |
| WebSphere Application Server Liberty | 17.0.0.3 | No fix stated |
Other CVEs of WebSphere Application Server Liberty
The 30 CVEs of WebSphere Application Server Liberty →
CVE-2026-1561
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty is…
5.4
Medium
CVE-2025-14914
IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.1 could allow a privileged user to upload a zip archive…
7.6
High
CVE-2025-12635
IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.12 are…
5.4
Medium
CVE-2025-36047
IBM WebSphere Application Server Liberty 18.0.0.2 through 25.0.0.8 is vulnerable to a denial of service, caused by…
5.3
Medium