Aller au contenu

Vulnérabilités connues pour IBM WebSphere Application Server

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2024-45086 IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML external entity injection (XXE) attack when… 5.5 Moyenne 4 nov. 2024
CVE-2024-45071 IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to stored cross-site scripting 5.5 Moyenne 16 oct. 2024
CVE-2024-45072 IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when… 5.5 Moyenne 16 oct. 2024
CVE-2024-45085 IBM WebSphere Application Server 8.5 is vulnerable to a denial of service, under certain configurations, caused by an… 5.9 Moyenne 15 oct. 2024
CVE-2024-45073 IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to stored cross-site scripting 4.8 Moyenne 30 sept. 2024
CVE-2023-50315 IBM WebSphere Application Server 8.5 and 9.0 could allow an attacker with access to the network to conduct spoofing… 5.3 Moyenne 14 août 2024
CVE-2024-35154 IBM WebSphere Application Server 8.5 and 9.0 could allow a remote authenticated attacker, who has authorized access to… 7.2 Élevée 9 juil. 2024
CVE-2024-35153 IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting 4.8 Moyenne 27 juin 2024
CVE-2024-37532 IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to identity spoofing by an authenticated user due to improper… 8.8 Élevée 20 juin 2024
CVE-2024-25026 IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.4 are… 5.9 Moyenne 25 avr. 2024
CVE-2024-22329 IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.3 are… 4.3 Moyenne 17 avr. 2024
CVE-2024-22354 IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.5 are… 7.0 Élevée 17 avr. 2024
CVE-2023-50313 IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security for outbound TLS connections… 5.3 Moyenne 2 avr. 2024
CVE-2023-35890 IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security, caused by the improper… 5.1 Moyenne 7 juil. 2023
CVE-2023-27554 IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when… 6.3 Moyenne 11 mai 2023
CVE-2022-39161 IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0, and IBM WebSphere Application Server Liberty, when configured to… 4.8 Moyenne 3 mai 2023
CVE-2023-24966 IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting 6.1 Moyenne 27 avr. 2023
CVE-2023-26283 IBM WebSphere Application Server 9.0 is vulnerable to cross-site scripting 5.4 Moyenne 22 mars 2023
CVE-2023-23477 IBM WebSphere Application Server 8.5 and 9.0 traditional could allow a remote attacker to execute arbitrary code on… 8.1 Élevée 3 févr. 2023
CVE-2022-43917 IBM WebSphere Application Server 8.5 and 9.0 traditional container uses weaker than expected cryptographic keys that… 5.9 Moyenne 25 janv. 2023
CVE-2022-40750 IBM WebSphere Application Server 8.5, and 9.0 is vulnerable to cross-site scripting 5.4 Moyenne 11 nov. 2022
CVE-2022-35282 IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to server-side request forgery (SSRF) 4.3 Moyenne 28 sept. 2022
CVE-2022-34336 IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting 5.4 Moyenne 13 sept. 2022
CVE-2022-34165 IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through… 5.4 Moyenne 9 sept. 2022
CVE-2022-22477 IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting 6.1 Moyenne 14 juil. 2022

Autres produits IBM