Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:websphere_application_server:8.0:*:*:*:*:*:*:*

part: a version: 8.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductWebsphere Application Server (5c21357a-8af1-5af9-af3a-1e448beb43b2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-39161 vulnerable 2026-06-08 05:47:18.252591 IBM WebSphere Application Server information disclosure
MEDIUM (4.8)
IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0, and IBM WebSphere Application Server Liberty, when configured to communicate with the Web Server Plug-ins for IBM WebSphere Application Server, could allow an authenticated user to conduct spoofing attacks. A man-in-the-middle attacker could exploit this vulnerability using a certificate issued by a trusted authority to obtain sensitive information. IBM X-Force ID: 235069.
Published: 2023-05-03T19:56:41.894Z
Updated: 2025-02-12T16:05:35.202Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34336 vulnerable 2026-06-08 05:44:52.629147 Details available
MEDIUM (5.4)
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 229714.
Published: 2022-09-13T20:45:25.070Z
Updated: 2024-09-17T02:52:56.187Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38951 vulnerable 2026-06-08 05:33:48.636735 Details available
HIGH (7.5)
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume all available CPU resources. IBM X-Force ID: 211405.
Published: 2021-12-09T17:00:30.662Z
Updated: 2024-09-16T16:47:45.409Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4534 vulnerable 2026-06-08 05:25:59.496049 Details available
HIGH (7.8)
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local authenticated attacker to gain elevated privileges on the system, caused by improper handling of UNC paths. By scheduling a task with a specially-crafted UNC path, an attacker could exploit this vulnerability to execute arbitrary code with higher privileges. IBM X-Force ID: 182808.
Published: 2020-08-03T12:35:38.468Z
Updated: 2024-09-17T03:03:24.345Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4732 vulnerable 2026-06-08 05:13:57.443701 Details available
HIGH (7.2)
IBM SDK, Java Technology Edition Version 7.0.0.0 through 7.0.10.55, 7.1.0.0 through 7.1.4.55, and 8.0.0.0 through 8.0.6.0 could allow a local authenticated attacker to execute arbitrary code on the system, caused by DLL search order hijacking vulnerability in Microsoft Windows client. By placing a specially-crafted file in a compromised folder, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 172618.
Published: 2020-02-03T16:45:18.286Z
Updated: 2024-09-16T22:09:29.963Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1793 vulnerable 2026-06-08 05:11:18.758461 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1614 vulnerable 2026-06-08 05:11:18.460639 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1743 vulnerable 2026-06-08 05:09:22.977467 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1741 vulnerable 2026-06-08 05:09:22.977030 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1503 vulnerable 2026-06-08 05:09:22.485539 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1194 vulnerable 2026-06-08 05:09:21.327989 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1151 vulnerable 2026-06-08 05:09:21.089130 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1137 vulnerable 2026-06-08 05:09:13.104739 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1121 vulnerable 2026-06-08 05:09:13.004303 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9736 vulnerable 2026-06-08 05:08:24.418894 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8919 vulnerable 2026-06-08 05:08:22.063994 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5986 vulnerable 2026-06-08 05:07:58.324878 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5983 vulnerable 2026-06-08 05:07:58.297231 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2960 vulnerable 2026-06-08 05:07:43.880999 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0385 vulnerable 2026-06-08 05:07:15.171795 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0359 vulnerable 2026-06-08 05:07:15.061996 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3021 vulnerable 2026-06-08 05:05:30.709447 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3305 vulnerable 2026-06-08 05:02:09.092998 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1376 vulnerable 2026-06-08 04:57:58.707365 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.