# IBM WebSphere Application Server Liberty. Every CVE that names IBM WebSphere Application Server Liberty among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [IBM WebSphere Application Server server-side request forgery](https://agentprime.io/advisories/CVE-2024-22329.md) `CVE-2024-22329` · CVE record: IBM WebSphere Application Server and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 17 Apr 2024 · Tags: Server-side request forgery (SSRF) - [IBM WebSphere Application Server XML external entity injection](https://agentprime.io/advisories/CVE-2024-22354.md) `CVE-2024-22354` · CVE record: IBM WebSphere Application Server and 1 more · CVSS 7.0 High · Not analysed yet · Published 17 Apr 2024 · Tags: XML external entities (XXE) - [IBM WebSphere Application Server Liberty denial of service](https://agentprime.io/advisories/CVE-2024-27268.md) `CVE-2024-27268` · CVE record: IBM WebSphere Application Server Liberty · CVSS 5.9 Medium · Not analysed yet · Published 4 Apr 2024 · Tags: Denial of service - [IBM WebSphere Application Server Liberty denial of service](https://agentprime.io/advisories/CVE-2024-22353.md) `CVE-2024-22353` · CVE record: IBM WebSphere Application Server Liberty · CVSS 5.9 Medium · Not analysed yet · Published 31 Mar 2024 · Tags: Denial of service - [IBM WebSphere Application Server Liberty cross-site scripting](https://agentprime.io/advisories/CVE-2024-27270.md) `CVE-2024-27270` · CVE record: IBM WebSphere Application Server Liberty · CVSS 4.7 Medium · Not analysed yet · Published 27 Mar 2024 · Tags: Cross-site scripting (XSS) - [IBM WebSphere Application Server Liberty information disclosure](https://agentprime.io/advisories/CVE-2023-50312.md) `CVE-2023-50312` · CVE record: IBM WebSphere Application Server Liberty · CVSS 5.3 Medium · Not analysed yet · Published 1 Mar 2024 · Tags: Weak cryptography or TLS - [IBM WebSphere Application Server session fixation](https://agentprime.io/advisories/CVE-2023-46158.md) `CVE-2023-46158` · CVE record: IBM WebSphere Application Server Liberty · CVSS 4.9 Medium · Not analysed yet · Published 25 Oct 2023 · Tags: Authentication bypass - [IBM WebSphere Application Server Liberty denial of service](https://agentprime.io/advisories/CVE-2023-38737.md) `CVE-2023-38737` · CVE record: IBM WebSphere Application Server Liberty · CVSS 5.9 Medium · Not analysed yet · Published 16 Aug 2023 · Tags: CWE-20 - [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2022-34165.md) `CVE-2022-34165` · CVE record: IBM WebSphere Application Server and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 9 Sept 2022 - [IBM WebSphere Application Server Liberty: IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.7 and Open Liberty are…](https://agentprime.io/advisories/CVE-2022-22476.md) `CVE-2022-22476` · CVE record: IBM WebSphere Application Server Liberty · CVSS 5.0 Medium · Not analysed yet · Published 8 Jul 2022 - [IBM WebSphere Application Server Liberty: IBM WebSphere Application Server Liberty and Open Liberty 17.0.0.3 through 22.0.0.5 are…](https://agentprime.io/advisories/CVE-2022-22475.md) `CVE-2022-22475` · CVE record: IBM WebSphere Application Server Liberty · CVSS 5.0 Medium · Not analysed yet · Published 17 May 2022 - [IBM WebSphere Application Server Liberty: IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.5…](https://agentprime.io/advisories/CVE-2022-22393.md) `CVE-2022-22393` · CVE record: IBM WebSphere Application Server Liberty · CVSS 3.1 Low · Not analysed yet · Published 13 May 2022 - [IBM WebSphere Application Server Liberty: IBM WebSphere Application Server 9.0 and IBM WebSphere Application Server Liberty…](https://agentprime.io/advisories/CVE-2021-39038.md) `CVE-2021-39038` · CVE record: IBM WebSphere Application Server Liberty and 1 more · CVSS 4.4 Medium · Not analysed yet · Published 24 Feb 2022 - [IBM WebSphere Application Server - Liberty 17.0.0.3 through 22.0.0.1 could allow a remote authenticated attacker to conduct an LDAP injection.](https://agentprime.io/advisories/CVE-2021-39031.md) `CVE-2021-39031` · CVE record: IBM WebSphere Application Server Liberty · CVSS 7.5 High · Not analysed yet · Published 25 Jan 2022 - [IBM WebSphere Application Server Liberty: IBM WebSphere Application Server Liberty 21.0.0.10 through 21.0.0.12 could provide weaker…](https://agentprime.io/advisories/CVE-2022-22310.md) `CVE-2022-22310` · CVE record: IBM WebSphere Application Server Liberty · CVSS 4.8 Medium · Not analysed yet · Published 19 Jan 2022 - [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2021-29842.md) `CVE-2021-29842` · CVE record: IBM WebSphere Application Server and 1 more · CVSS 3.7 Low · Not analysed yet · Published 16 Sept 2021 - [IBM WebSphere Application Server Liberty: IBM WebSphere Application Server Liberty 17.0.0.3 through 20.0.0.9 running oauth-2.0 or…](https://agentprime.io/advisories/CVE-2020-4590.md) `CVE-2020-4590` · CVE record: IBM WebSphere Application Server Liberty · CVSS 5.3 Medium · Not analysed yet · Published 21 Sept 2020 - [IBM WebSphere Application Liberty 19.0.0.5 through 20.0.0.4 could allow an authenticated user using openidconnect to spoof another users identify.](https://agentprime.io/advisories/CVE-2020-4421.md) `CVE-2020-4421` · CVE record: IBM WebSphere Application Server Liberty · CVSS 5.0 Medium · Not analysed yet · Published 6 May 2020 - [IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 20.0.0.4 could allow a remote, authenticated attacker to obtain sensitive information, caused by improper parameter ch…](https://agentprime.io/advisories/CVE-2020-4329.md) `CVE-2020-4329` · CVE record: IBM WebSphere Application Server Liberty and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 28 Apr 2020 - [IBM WebSphere Application Server - Liberty 17.0.0.3 through 20.0.0.3 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2020-4304.md) `CVE-2020-4304` · CVE record: IBM WebSphere Application Server Liberty · CVSS 6.1 Medium · Not analysed yet · Published 2 Apr 2020 - [IBM WebSphere Application Server - Liberty 17.0.0.3 through 20.0.0.3 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2020-4303.md) `CVE-2020-4303` · CVE record: IBM WebSphere Application Server Liberty · CVSS 6.1 Medium · Not analysed yet · Published 2 Apr 2020 - [IBM WebSphere Application Server Liberty: IBM WebSphere Application Server Liberty prior to 18.0.0.2 could allow a remote attacker…](https://agentprime.io/advisories/CVE-2018-1553.md) `CVE-2018-1553` · CVE record: IBM IBM WebSphere Application Server Liberty · CVSS 5.3 Medium · Not analysed yet · Published 27 Jun 2018 Newest: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .