IBM Websphere Application Server Liberty 8.5.5.9
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:websphere_application_server:8.5.5.9:*:*:*:liberty:*:*:*
part: a version: 8.5.5.9 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Websphere Application Server (5c21357a-8af1-5af9-af3a-1e448beb43b2) |
| Edition | * |
| Language | * |
| Software edition | liberty |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2016-2945 |
vulnerable | 2026-06-08 05:07:43.813599 |
Details available
The API Discovery implementation in IBM WebSphere Application Server (WAS) 8.5.5.8 through 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 allows remote authenticated users to gain privileges via an external reference in a Swagger document.
Published: 2016-07-08T01:00:00.000Z
Updated: 2024-08-05T23:40:13.903Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-2923 |
vulnerable | 2026-06-08 05:07:43.718546 |
Details available
IBM WebSphere Application Server (WAS) 8.5 through 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 does not include the HTTPOnly flag in a Set-Cookie header for an unspecified JAX-RS API cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.
Published: 2016-07-07T14:00:00.000Z
Updated: 2024-08-05T23:40:13.768Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-0389 |
vulnerable | 2026-06-08 05:07:15.189157 |
Details available
Admin Center in IBM WebSphere Application Server (WAS) 8.5.5.2 through 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 allows remote attackers to obtain sensitive information via unspecified vectors.
Published: 2016-07-07T14:00:00.000Z
Updated: 2024-08-05T22:15:24.352Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.