Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:websphere_application_server:7.0.0.0:*:*:*:*:*:*:*

part: a version: 7.0.0.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductWebsphere Application Server (5c21357a-8af1-5af9-af3a-1e448beb43b2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-4279 vulnerable 2026-06-08 05:13:57.037813 Details available
CRITICAL (9)
IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to execute arbitrary code on the system with a specially-crafted sequence of serialized objects from untrusted sources. IBM X-Force ID: 160445.
Published: 2019-05-17T15:20:16.803Z
Updated: 2024-09-17T01:45:50.089Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4271 vulnerable 2026-06-08 05:13:57.034710 Details available
LOW (3.5)
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Admin console is vulnerable to a Client-side HTTP parameter pollution vulnerability. IBM X-Force ID: 160243.
Published: 2019-09-17T19:05:23.980Z
Updated: 2024-09-17T01:26:25.571Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1695 vulnerable 2026-06-08 05:11:18.605845 Details available
HIGH (7.3)
IBM WebSphere Application Server 7.0, 8.0, and 8.5.5 installations using Form Login could allow a remote attacker to conduct spoofing attacks. IBM X-Force ID: 145769.
Published: 2018-09-06T14:00:00.000Z
Updated: 2024-09-16T19:00:23.347Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1621 vulnerable 2026-06-08 05:11:18.465778 Details available
MEDIUM (4.4)
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local attacker to obtain clear text password in a trace file caused by improper handling of some datasource custom properties. IBM X-Force ID: 144346.
Published: 2018-07-06T14:00:00.000Z
Updated: 2024-09-17T01:01:50.768Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5986 vulnerable 2026-06-08 05:07:58.324237 Details available
IBM WebSphere Application Server (WAS) 7.x before 7.0.0.43, 8.0.x before 8.0.0.13, 8.5.x before 8.5.5.11, 9.0.x before 9.0.0.2, and Liberty before 16.0.0.3 mishandles responses, which allows remote attackers to obtain sensitive information via unspecified vectors.
Published: 2016-10-01T01:00:00.000Z
Updated: 2024-08-06T01:15:10.644Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5983 vulnerable 2026-06-08 05:07:58.276135 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2960 vulnerable 2026-06-08 05:07:43.854522 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0385 vulnerable 2026-06-08 05:07:15.171134 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0377 vulnerable 2026-06-08 05:07:15.137694 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0359 vulnerable 2026-06-08 05:07:15.047000 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0306 vulnerable 2026-06-08 05:07:14.934778 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7417 vulnerable 2026-06-08 05:07:00.784040 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.