Approved changes feed: RSS · Atom

cpe:2.3:a:ibm_corporation:websphere_application_server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm Corporation (d12a6641-f3f1-52ca-aee3-0e264bbe9c89)
ProductWebsphere Application Server (7a991291-a97c-52c0-a4f6-2262a20dfdcf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1151 vulnerable 2026-06-08 05:09:21.088575 Details available
IBM WebSphere Application Server 8.0, 8.5, 8.5.5, and 9.0 using OpenID Connect (OIDC) configured with a Trust Association Interceptor (TAI) could allow a user to gain elevated privileges on the system. IBM Reference #: 1999293.
Published: 2017-03-20T16:00:00.000Z
Updated: 2024-08-05T13:25:17.345Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1137 vulnerable 2026-06-08 05:09:13.104700 Details available
IBM WebSphere Application Server 8.0 and 8.5.5 could provide weaker than expected security. A remote attacker could exploit this weakness to obtain sensitive information and gain unauthorized access to the admin console. IBM X-Force ID: 121549.
Published: 2017-05-10T14:00:00.000Z
Updated: 2024-08-05T13:25:17.235Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1121 vulnerable 2026-06-08 05:09:13.002777 Details available
IBM WebSphere Application Server 7.0, 8.0, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1997743
Published: 2017-02-13T22:00:00.000Z
Updated: 2024-08-05T13:25:17.230Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8919 vulnerable 2026-06-08 05:08:22.062887 Details available
IBM WebSphere Application Server may be vulnerable to a denial of service, caused by allowing serialized objects from untrusted sources to run and cause the consumption of resources.
Published: 2017-02-01T22:00:00.000Z
Updated: 2024-08-06T02:35:02.271Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.