Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:websphere_application_server_liberty:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductWebsphere Application Server Liberty (2f5763bb-b5d3-515a-994e-95b1cf45aff7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-27270 vulnerable 2026-06-08 06:31:28.390797 IBM WebSphere Application Server Liberty cross-site scripting
MEDIUM (4.7)
IBM WebSphere Application Server Liberty 23.0.0.3 through 24.0.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in a specially crafted URI. IBM X-Force ID: 284576.
Published: 2024-03-27T12:42:52.797Z
Updated: 2024-08-02T00:27:59.901Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27268 vulnerable 2026-06-08 06:31:28.378737 IBM WebSphere Application Server Liberty denial of service
MEDIUM (5.9)
IBM WebSphere Application Server Liberty 18.0.0.2 through 24.0.0.4 is vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 284574.
Published: 2024-04-04T17:26:50.305Z
Updated: 2024-08-02T00:27:59.848Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25026 vulnerable 2026-06-08 06:29:42.208843 IBM WebSphere Application Server denial of service
MEDIUM (5.9)
IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.4 are vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 281516.
Published: 2024-04-25T12:16:24.487Z
Updated: 2024-08-01T23:36:21.572Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22354 vulnerable 2026-06-08 06:29:34.633428 IBM WebSphere Application Server XML external entity injection
HIGH (7)
IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.5 are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information, consume memory resources, or to conduct a server-side request forgery attack. IBM X-Force ID: 280401.
Published: 2024-04-17T01:07:58.187Z
Updated: 2024-08-01T22:43:34.570Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22353 vulnerable 2026-06-08 06:29:34.632665 IBM WebSphere Application Server Liberty denial of service
MEDIUM (5.9)
IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.4 is vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 280400.
Published: 2024-03-31T11:43:14.045Z
Updated: 2024-08-01T22:43:34.658Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22329 vulnerable 2026-06-08 06:29:34.550974 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50312 vulnerable 2026-06-08 06:16:15.927952 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46158 vulnerable 2026-06-08 06:12:44.287081 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38737 vulnerable 2026-06-08 06:08:18.769898 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34165 vulnerable 2026-06-08 05:44:52.244585 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22476 vulnerable 2026-06-08 05:40:53.788008 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22475 vulnerable 2026-06-08 05:40:53.786288 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22393 vulnerable 2026-06-08 05:40:53.707321 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22310 vulnerable 2026-06-08 05:40:08.180101 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-39038 vulnerable 2026-06-08 05:33:48.802651 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-39031 vulnerable 2026-06-08 05:33:48.793044 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29842 vulnerable 2026-06-08 05:31:27.081901 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4590 vulnerable 2026-06-08 05:26:40.500239 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4421 vulnerable 2026-06-08 05:25:59.308947 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4329 vulnerable 2026-06-08 05:25:59.202873 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4304 vulnerable 2026-06-08 05:25:59.152541 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4303 vulnerable 2026-06-08 05:25:59.151311 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.