Skip to content

Known vulnerabilities in IBM WebSphere Application Server

Is your version affected?

CVE Summary Score Published
CVE-2020-4448 IBM WebSphere Application Server Network Deployment 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to execute… 9.8 Critical Jun 5, 2020
CVE-2020-4365 IBM WebSphere Application Server 8.5 is vulnerable to server-side request forgery 5.3 Medium May 14, 2020
CVE-2020-4329 IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 20.0.0.4 could allow a remote,… 4.3 Medium Apr 28, 2020
CVE-2020-4362 IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional is vulnerable to a privilege escalation… 7.5 High Apr 10, 2020
CVE-2020-4276 IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional is vulnerable to a privilege escalation… 7.5 High Mar 26, 2020
CVE-2019-4670 IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to obtain sensitive information… 6.5 Medium Feb 5, 2020
CVE-2020-4163 IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0, under specialized conditions, could allow an authenticated user… 6.6 Medium Feb 4, 2020
CVE-2019-4720 IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a denial of service, caused by sending a… 7.5 High Jan 31, 2020
CVE-2019-4663 IBM WebSphere Application Server - Liberty is vulnerable to cross-site scripting 5.4 Medium Dec 10, 2019
CVE-2019-4441 IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0, and Liberty could allow a remote attacker to obtain sensitive… 5.3 Medium Oct 3, 2019
CVE-2019-4305 IBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive information caused by the… 5.3 Medium Sep 30, 2019
CVE-2019-4304 IBM WebSphere Application Server - Liberty could allow a remote attacker to bypass security restrictions caused by… 6.3 Medium Sep 30, 2019
CVE-2019-4505 IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Network Deployment could allow a remote attacker to obtain… 3.7 Low Sep 20, 2019
CVE-2019-4477 IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a user with access to audit logs to obtain sensitive… 5.3 Medium Sep 17, 2019
CVE-2019-4442 IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9,0 could allow a remote attacker to traverse directories on the… 4.3 Medium Sep 17, 2019
CVE-2019-4271 IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Admin console is vulnerable to a Client-side HTTP parameter… 3.5 Low Sep 17, 2019
CVE-2019-4270 IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Admin Console is vulnerable to cross-site scripting 5.4 Medium Sep 17, 2019
CVE-2019-4268 IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the… 5.3 Medium Sep 17, 2019
CVE-2019-4285 IBM WebSphere Application Server - Liberty Admin Center could allow a remote attacker to hijack the clicking action of… 5.4 Medium Jul 30, 2019
CVE-2019-4269 IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Admin Console could allow a remote attacker to obtain… 5.3 Medium Jun 28, 2019
CVE-2019-4279 IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to execute arbitrary code on the system… 9.0 Critical May 17, 2019
CVE-2019-4080 IBM WebSphere Application Server Admin Console 7.5, 8.0, 8.5, and 9.0 is vulnerable to a potential denial of service,… 6.5 Medium Apr 2, 2019
CVE-2019-4046 IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a denial of service, caused by improper… 5.9 Medium Mar 25, 2019
CVE-2018-1902 IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to spoof connection information… 3.1 Low Mar 11, 2019
CVE-2018-1890 IBM SDK, Java Technology Edition Version 8 on the AIX platform uses absolute RPATHs which may facilitate code… 5.6 Medium Mar 11, 2019

Other IBM products