| CVE-2024-45086 |
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML external entity injection (XXE) attack when…
|
5.5
Medium
|
Nov 4, 2024 |
| CVE-2024-45071 |
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to stored cross-site scripting
|
5.5
Medium
|
Oct 16, 2024 |
| CVE-2024-45072 |
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when…
|
5.5
Medium
|
Oct 16, 2024 |
| CVE-2024-45085 |
IBM WebSphere Application Server 8.5 is vulnerable to a denial of service, under certain configurations, caused by an…
|
5.9
Medium
|
Oct 15, 2024 |
| CVE-2024-45073 |
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to stored cross-site scripting
|
4.8
Medium
|
Sep 30, 2024 |
| CVE-2023-50315 |
IBM WebSphere Application Server 8.5 and 9.0 could allow an attacker with access to the network to conduct spoofing…
|
5.3
Medium
|
Aug 14, 2024 |
| CVE-2024-35154 |
IBM WebSphere Application Server 8.5 and 9.0 could allow a remote authenticated attacker, who has authorized access to…
|
7.2
High
|
Jul 9, 2024 |
| CVE-2024-35153 |
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting
|
4.8
Medium
|
Jun 27, 2024 |
| CVE-2024-37532 |
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to identity spoofing by an authenticated user due to improper…
|
8.8
High
|
Jun 20, 2024 |
| CVE-2024-25026 |
IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.4 are…
|
5.9
Medium
|
Apr 25, 2024 |
| CVE-2024-22329 |
IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.3 are…
|
4.3
Medium
|
Apr 17, 2024 |
| CVE-2024-22354 |
IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.5 are…
|
7.0
High
|
Apr 17, 2024 |
| CVE-2023-50313 |
IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security for outbound TLS connections…
|
5.3
Medium
|
Apr 2, 2024 |
| CVE-2023-35890 |
IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security, caused by the improper…
|
5.1
Medium
|
Jul 7, 2023 |
| CVE-2023-27554 |
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when…
|
6.3
Medium
|
May 11, 2023 |
| CVE-2022-39161 |
IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0, and IBM WebSphere Application Server Liberty, when configured to…
|
4.8
Medium
|
May 3, 2023 |
| CVE-2023-24966 |
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting
|
6.1
Medium
|
Apr 27, 2023 |
| CVE-2023-26283 |
IBM WebSphere Application Server 9.0 is vulnerable to cross-site scripting
|
5.4
Medium
|
Mar 22, 2023 |
| CVE-2023-23477 |
IBM WebSphere Application Server 8.5 and 9.0 traditional could allow a remote attacker to execute arbitrary code on…
|
8.1
High
|
Feb 3, 2023 |
| CVE-2022-43917 |
IBM WebSphere Application Server 8.5 and 9.0 traditional container uses weaker than expected cryptographic keys that…
|
5.9
Medium
|
Jan 25, 2023 |
| CVE-2022-40750 |
IBM WebSphere Application Server 8.5, and 9.0 is vulnerable to cross-site scripting
|
5.4
Medium
|
Nov 11, 2022 |
| CVE-2022-35282 |
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to server-side request forgery (SSRF)
|
4.3
Medium
|
Sep 28, 2022 |
| CVE-2022-34336 |
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting
|
5.4
Medium
|
Sep 13, 2022 |
| CVE-2022-34165 |
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through…
|
5.4
Medium
|
Sep 9, 2022 |
| CVE-2022-22477 |
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting
|
6.1
Medium
|
Jul 14, 2022 |