GCVE - cpe:2.3:a:ibm:websphere_extreme_scale:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:websphere_extreme_scale:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Ibm (`177c0602-9232-5933-8f2f-9d22f079d22d`)
Product	Websphere Extreme Scale (`c6c8f778-2dcc-5eb0-8a7d-5b1f3fec7590`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2020-4336`	vulnerable	2026-06-08 05:25:59.204700	Details available LOW (3.7) IBM WebSphere eXtreme Scale 8.6.1 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 177932. Published: 2021-01-06T13:10:14.732Z Updated: 2024-09-16T20:22:17.437Z Open on db.gcve.eu Reference links https://www.ibm.com/support/pages/node/6397682 https://exchange.xforce.ibmcloud.com/vulnerabilities/177932	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-4115`	vulnerable	2026-06-08 05:13:56.840373	Details available MEDIUM (5.4) IBM WebSphere eXtreme Scale 8.6 Admin API is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 158113. Published: 2019-09-30T15:20:30.669Z Updated: 2024-09-16T16:13:45.004Z Open on db.gcve.eu Reference links https://www.ibm.com/support/pages/node/1073864 https://exchange.xforce.ibmcloud.com/vulnerabilities/158113	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-4112`	vulnerable	2026-06-08 05:13:56.840027	Details available MEDIUM (4) IBM WebSphere eXtreme Scale 8.6 Admin Console allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 158105. Published: 2019-09-30T15:20:30.238Z Updated: 2024-09-17T00:26:13.905Z Open on db.gcve.eu Reference links https://www.ibm.com/support/pages/node/1073864 https://exchange.xforce.ibmcloud.com/vulnerabilities/158105	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-4109`	vulnerable	2026-06-08 05:13:56.839683	Details available MEDIUM (6.1) IBM WebSphere eXtreme Scale 8.6 Admin Console could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 158102. Published: 2019-09-30T15:20:29.709Z Updated: 2024-09-16T18:08:59.888Z Open on db.gcve.eu Reference links https://www.ibm.com/support/pages/node/1073864 https://exchange.xforce.ibmcloud.com/vulnerabilities/158102	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-4106`	vulnerable	2026-06-08 05:13:56.839266	Details available MEDIUM (4.8) IBM WebSphere eXtreme Scale 8.6 Admin Console is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 158099. Published: 2019-09-30T15:20:29.277Z Updated: 2024-09-17T04:20:33.971Z Open on db.gcve.eu Reference links https://www.ibm.com/support/pages/node/1073864 https://exchange.xforce.ibmcloud.com/vulnerabilities/158099	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.