Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:websphere_application_server:8.5.5:*:*:*:*:*:*:*

part: a version: 8.5.5 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductWebsphere Application Server (5c21357a-8af1-5af9-af3a-1e448beb43b2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1151 vulnerable 2026-06-08 05:09:21.090354 Details available
IBM WebSphere Application Server 8.0, 8.5, 8.5.5, and 9.0 using OpenID Connect (OIDC) configured with a Trust Association Interceptor (TAI) could allow a user to gain elevated privileges on the system. IBM Reference #: 1999293.
Published: 2017-03-20T16:00:00.000Z
Updated: 2024-08-05T13:25:17.345Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1137 vulnerable 2026-06-08 05:09:13.104783 Details available
IBM WebSphere Application Server 8.0 and 8.5.5 could provide weaker than expected security. A remote attacker could exploit this weakness to obtain sensitive information and gain unauthorized access to the admin console. IBM X-Force ID: 121549.
Published: 2017-05-10T14:00:00.000Z
Updated: 2024-08-05T13:25:17.235Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1121 vulnerable 2026-06-08 05:09:13.005705 Details available
IBM WebSphere Application Server 7.0, 8.0, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1997743
Published: 2017-02-13T22:00:00.000Z
Updated: 2024-08-05T13:25:17.230Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8919 vulnerable 2026-06-08 05:08:22.067012 Details available
IBM WebSphere Application Server may be vulnerable to a denial of service, caused by allowing serialized objects from untrusted sources to run and cause the consumption of resources.
Published: 2017-02-01T22:00:00.000Z
Updated: 2024-08-06T02:35:02.271Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.