Show filters
838 Total Results
Displaying 41-50 of 838
Sort by:
Attacker Value
Unknown
CVE-2022-35282
Disclosure Date: September 27, 2022 (last updated February 24, 2025)
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to server-side request forgery (SSRF). By sending a specially crafted request, an attacker with local network access could exploit this vulnerability to obtain sensitive data.
0
Attacker Value
Unknown
CVE-2022-34336
Disclosure Date: September 12, 2022 (last updated February 24, 2025)
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 229714.
0
Attacker Value
Unknown
CVE-2022-34165
Disclosure Date: September 07, 2022 (last updated February 24, 2025)
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.9 are vulnerable to HTTP header injection, caused by improper validation. This could allow an attacker to conduct various attacks against the vulnerable system, including cache poisoning and cross-site scripting. IBM X-Force ID: 229429.
0
Attacker Value
Unknown
CVE-2022-22473
Disclosure Date: July 13, 2022 (last updated October 07, 2023)
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to obtain sensitive information caused by improper handling of Administrative Console data. This information could be used in further attacks against the system. IBM X-Force ID: 225347.
0
Attacker Value
Unknown
CVE-2022-22477
Disclosure Date: July 13, 2022 (last updated February 24, 2025)
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 225605.
0
Attacker Value
Unknown
CVE-2022-22476
Disclosure Date: July 07, 2022 (last updated February 24, 2025)
IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.7 and Open Liberty are vulnerable to identity spoofing by an authenticated user using a specially crafted request. IBM X-Force ID: 225604.
0
Attacker Value
Unknown
CVE-2022-22365
Disclosure Date: May 19, 2022 (last updated October 07, 2023)
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0, with the Ajax Proxy Web Application (AjaxProxy.war) deployed, is vulnerable to spoofing by allowing a man-in-the-middle attacker to spoof SSL server hostnames. IBM X-Force ID: 220904.
0
Attacker Value
Unknown
CVE-2022-22475
Disclosure Date: May 16, 2022 (last updated October 07, 2023)
IBM WebSphere Application Server Liberty and Open Liberty 17.0.0.3 through 22.0.0.5 are vulnerable to identity spoofing by an authenticated user. IBM X-Force ID: 225603.
0
Attacker Value
Unknown
CVE-2022-22393
Disclosure Date: May 12, 2022 (last updated October 07, 2023)
IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.5 , with the adminCenter-1.0 feature configured, could allow an authenticated user to issue a request to obtain the status of HTTP/HTTPS ports which are accessible by the application server. IBM X-Force ID: 222078.
0
Attacker Value
Unknown
CVE-2021-39038
Disclosure Date: February 23, 2022 (last updated February 23, 2025)
IBM WebSphere Application Server 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.2 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 213968.
0
