Websphere Application Server
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:-:*:*:*
part: a version: * update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Websphere Application Server (5c21357a-8af1-5af9-af3a-1e448beb43b2) |
| Edition | * |
| Language | * |
| Software edition | - |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-36097 |
vulnerable | 2026-06-08 07:21:00.951832 |
IBM WebSphere Application Server denial of service
HIGH (7.5)
IBM WebSphere Application Server 9.0 and WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.7 are vulnerable to a denial of service, caused by a stack-based overflow. An attacker can send a specially crafted request that cause the server to consume excessive memory resources.
Published: 2025-07-16T17:44:14.979Z
Updated: 2025-08-18T01:34:17.799Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-33142 |
vulnerable | 2026-06-08 07:19:01.857591 |
IBM WebSphere Application Server information disclosure
MEDIUM (5.3)
IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security for TLS connections.
Published: 2025-08-14T15:41:59.719Z
Updated: 2025-08-14T19:55:56.651Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-30441 |
vulnerable | 2026-06-08 06:04:39.354572 |
IBM Java information disclosure
HIGH (7.5)
IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0 through 8.0.7.11 components could expose sensitive information using a combination of flaws and configurations. IBM X-Force ID: 253188.
Published: 2023-04-29T14:40:40.263Z
Updated: 2025-01-30T17:01:26.113Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20454 |
vulnerable | 2026-06-08 05:29:09.276894 |
Details available
HIGH (8.2)
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 196649.
Published: 2021-04-21T12:05:20.721Z
Updated: 2024-09-16T17:33:20.448Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4782 |
vulnerable | 2026-06-08 05:26:40.910370 |
Details available
MEDIUM (6.5)
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.
Published: 2020-10-28T16:15:19.877Z
Updated: 2024-09-16T18:43:28.591Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-4441 |
vulnerable | 2026-06-08 05:13:57.178431 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.