Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:websphere_application_server:9.0.0.0:*:*:*:*:*:*:*

part: a version: 9.0.0.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductWebsphere Application Server (5c21357a-8af1-5af9-af3a-1e448beb43b2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-36099 vulnerable 2026-06-08 07:21:00.962432 IBM WebSphere Application Server denial of service
MEDIUM (4.9)
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to a denial of service, caused by sending a specially-crafted request. A privileged user could exploit this vulnerability to cause the server to consume memory resources.
Published: 2025-09-29T18:20:09.984Z
Updated: 2025-09-29T18:38:52.375Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37532 vulnerable 2026-06-08 06:39:47.876298 IBM WebSphere Application Server identity spoofing
HIGH (8.8)
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to identity spoofing by an authenticated user due to improper signature validation. IBM X-Force ID: 294721.
Published: 2024-06-20T13:22:16.089Z
Updated: 2024-08-02T03:57:39.626Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50315 vulnerable 2026-06-08 06:16:15.942192 IBM WebSphere Application Server information disclosure
MEDIUM (5.3)
IBM WebSphere Application Server 8.5 and 9.0 could allow an attacker with access to the network to conduct spoofing attacks. An attacker could exploit this vulnerability using a certificate issued by a trusted authority to obtain sensitive information. IBM X-Force ID: 274714.
Published: 2024-08-14T17:04:49.881Z
Updated: 2024-08-14T17:43:47.744Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1838 vulnerable 2026-06-08 05:11:26.270804 Details available
MEDIUM (5.3)
IBM WebSphere Application Server 8.5 and 9.0 in IBM Cloud could allow a remote attacker to obtain sensitive information caused by improper handling of passwords. IBM X-Force ID: 150811.
Published: 2018-10-12T05:00:00.000Z
Updated: 2024-09-17T02:33:01.275Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1621 vulnerable 2026-06-08 05:11:18.468923 Details available
MEDIUM (4.4)
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local attacker to obtain clear text password in a trace file caused by improper handling of some datasource custom properties. IBM X-Force ID: 144346.
Published: 2018-07-06T14:00:00.000Z
Updated: 2024-09-17T01:01:50.768Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1501 vulnerable 2026-06-08 05:09:22.480295 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8934 vulnerable 2026-06-08 05:08:22.134389 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5986 vulnerable 2026-06-08 05:07:58.325424 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5983 vulnerable 2026-06-08 05:07:58.311793 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2960 vulnerable 2026-06-08 05:07:43.896908 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0385 vulnerable 2026-06-08 05:07:15.181805 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.