Websphere Application Server
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:traditional:*:*:*
part: a version: * update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Websphere Application Server (5c21357a-8af1-5af9-af3a-1e448beb43b2) |
| Edition | * |
| Language | * |
| Software edition | traditional |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-45085 |
vulnerable | 2026-06-08 06:45:54.551803 |
IBM WebSphere Application Server denial of service
MEDIUM (5.9)
IBM WebSphere Application Server 8.5 is vulnerable to a denial of service, under certain configurations, caused by an unexpected specially crafted request. A remote attacker could exploit this vulnerability to cause an error resulting in a denial of service.
Published: 2024-10-15T21:12:36.664Z
Updated: 2024-10-16T14:24:08.447Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-25026 |
vulnerable | 2026-06-08 06:29:42.210996 |
IBM WebSphere Application Server denial of service
MEDIUM (5.9)
IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.4 are vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 281516.
Published: 2024-04-25T12:16:24.487Z
Updated: 2024-08-01T23:36:21.572Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22354 |
vulnerable | 2026-06-08 06:29:34.633554 |
IBM WebSphere Application Server XML external entity injection
HIGH (7)
IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.5 are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information, consume memory resources, or to conduct a server-side request forgery attack. IBM X-Force ID: 280401.
Published: 2024-04-17T01:07:58.187Z
Updated: 2024-08-01T22:43:34.570Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22329 |
vulnerable | 2026-06-08 06:29:34.556590 |
IBM WebSphere Application Server server-side request forgery
MEDIUM (4.3)
IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.3 are vulnerable to server-side request forgery (SSRF). By sending a specially crafted request, an attacker could exploit this vulnerability to conduct the SSRF attack. X-Force ID: 279951.
Published: 2024-04-17T01:21:46.300Z
Updated: 2024-10-23T15:47:46.996Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.