Show filters
838 Total Results
Displaying 21-30 of 838
Sort by:
Attacker Value
Unknown
CVE-2024-27268
Disclosure Date: April 04, 2024 (last updated May 16, 2024)
IBM WebSphere Application Server Liberty 18.0.0.2 through 24.0.0.4 is vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 284574.
0
Attacker Value
Unknown
CVE-2023-50313
Disclosure Date: April 02, 2024 (last updated April 09, 2024)
IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security for outbound TLS connections caused by a failure to honor user configuration. IBM X-Force ID: 274812.
0
Attacker Value
Unknown
CVE-2024-22353
Disclosure Date: March 31, 2024 (last updated May 16, 2024)
IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.4 is vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 280400.
0
Attacker Value
Unknown
CVE-2024-27270
Disclosure Date: March 27, 2024 (last updated April 02, 2024)
IBM WebSphere Application Server Liberty 23.0.0.3 through 24.0.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in a specially crafted URI. IBM X-Force ID: 284576.
0
Attacker Value
Unknown
CVE-2023-50312
Disclosure Date: March 01, 2024 (last updated March 01, 2024)
IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.2 could provide weaker than expected security for outbound TLS connections caused by a failure to honor user configuration. IBM X-Force ID: 274711.
0
Attacker Value
Unknown
CVE-2023-46158
Disclosure Date: October 25, 2023 (last updated November 02, 2023)
IBM WebSphere Application Server Liberty 23.0.0.9 through 23.0.0.10 could provide weaker than expected security due to improper resource expiration handling. IBM X-Force ID: 268775.
0
Attacker Value
Unknown
CVE-2023-38737
Disclosure Date: August 16, 2023 (last updated October 08, 2023)
IBM WebSphere Application Server Liberty 22.0.0.13 through 23.0.0.7 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 262567.
0
Attacker Value
Unknown
CVE-2023-35890
Disclosure Date: July 07, 2023 (last updated October 08, 2023)
IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security, caused by the improper encoding in a local configuration file. IBM X-Force ID: 258637.
0
Attacker Value
Unknown
CVE-2023-27554
Disclosure Date: May 11, 2023 (last updated January 25, 2025)
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 249185.
0
Attacker Value
Unknown
CVE-2022-39161
Disclosure Date: May 03, 2023 (last updated October 08, 2023)
IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0, and IBM WebSphere Application Server Liberty, when configured to communicate with the Web Server Plug-ins for IBM WebSphere Application Server, could allow an authenticated user to conduct spoofing attacks. A man-in-the-middle attacker could exploit this vulnerability using a certificate issued by a trusted authority to obtain sensitive information. IBM X-Force ID: 235069.
0
