Advisories · Technology

IBM WebSphere Application Server Liberty.

Every CVE that names IBM WebSphere Application Server Liberty among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-22329 CVE record

CVSS 4.3 Medium

IBM WebSphere Application Server server-side request forgery
- IBM WebSphere Application Server
- IBM WebSphere Application Server Liberty
- Server-side request forgery (SSRF)
Not analysed yet 17 Apr 2024
CVE-2024-22354 CVE record

CVSS 7.0 High

IBM WebSphere Application Server XML external entity injection
- IBM WebSphere Application Server
- IBM WebSphere Application Server Liberty
- XML external entities (XXE)
Not analysed yet 17 Apr 2024
CVE-2024-27268 CVE record

CVSS 5.9 Medium

IBM WebSphere Application Server Liberty denial of service
- IBM WebSphere Application Server Liberty
- Denial of service
Not analysed yet 4 Apr 2024
CVE-2024-22353 CVE record

CVSS 5.9 Medium

IBM WebSphere Application Server Liberty denial of service
- IBM WebSphere Application Server Liberty
- Denial of service
Not analysed yet 31 Mar 2024
CVE-2024-27270 CVE record

CVSS 4.7 Medium

IBM WebSphere Application Server Liberty cross-site scripting
- IBM WebSphere Application Server Liberty
- Cross-site scripting (XSS)
Not analysed yet 27 Mar 2024
CVE-2023-50312 CVE record

CVSS 5.3 Medium

IBM WebSphere Application Server Liberty information disclosure
- IBM WebSphere Application Server Liberty
- Weak cryptography or TLS
Not analysed yet 1 Mar 2024
CVE-2023-46158 CVE record

CVSS 4.9 Medium

IBM WebSphere Application Server session fixation
- IBM WebSphere Application Server Liberty
- Authentication bypass
Not analysed yet 25 Oct 2023
CVE-2023-38737 CVE record

CVSS 5.9 Medium

IBM WebSphere Application Server Liberty denial of service
- IBM WebSphere Application Server Liberty
- CWE-20
Not analysed yet 16 Aug 2023
CVE-2022-34165 CVE record

CVSS 5.4 Medium

IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…
- IBM WebSphere Application Server
- IBM WebSphere Application Server Liberty
Not analysed yet 9 Sept 2022
CVE-2022-22476 CVE record

CVSS 5.0 Medium

IBM WebSphere Application Server Liberty: IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.7 and Open Liberty are…
- IBM WebSphere Application Server Liberty
Not analysed yet 8 Jul 2022
CVE-2022-22475 CVE record

CVSS 5.0 Medium

IBM WebSphere Application Server Liberty: IBM WebSphere Application Server Liberty and Open Liberty 17.0.0.3 through 22.0.0.5 are…
- IBM WebSphere Application Server Liberty
Not analysed yet 17 May 2022
CVE-2022-22393 CVE record

CVSS 3.1 Low

IBM WebSphere Application Server Liberty: IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.5…
- IBM WebSphere Application Server Liberty
Not analysed yet 13 May 2022
CVE-2021-39038 CVE record

CVSS 4.4 Medium

IBM WebSphere Application Server Liberty: IBM WebSphere Application Server 9.0 and IBM WebSphere Application Server Liberty…
- IBM WebSphere Application Server Liberty
- IBM WebSphere Application Server
Not analysed yet 24 Feb 2022
CVE-2021-39031 CVE record

CVSS 7.5 High

IBM WebSphere Application Server - Liberty 17.0.0.3 through 22.0.0.1 could allow a remote authenticated attacker to conduct an LDAP injection.
- IBM WebSphere Application Server Liberty
Not analysed yet 25 Jan 2022
CVE-2022-22310 CVE record

CVSS 4.8 Medium

IBM WebSphere Application Server Liberty: IBM WebSphere Application Server Liberty 21.0.0.10 through 21.0.0.12 could provide weaker…
- IBM WebSphere Application Server Liberty
Not analysed yet 19 Jan 2022
CVE-2021-29842 CVE record

CVSS 3.7 Low

IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…
- IBM WebSphere Application Server
- IBM WebSphere Application Server Liberty
Not analysed yet 16 Sept 2021
CVE-2020-4590 CVE record

CVSS 5.3 Medium

IBM WebSphere Application Server Liberty: IBM WebSphere Application Server Liberty 17.0.0.3 through 20.0.0.9 running oauth-2.0 or…
- IBM WebSphere Application Server Liberty
Not analysed yet 21 Sept 2020
CVE-2020-4421 CVE record

CVSS 5.0 Medium

IBM WebSphere Application Liberty 19.0.0.5 through 20.0.0.4 could allow an authenticated user using openidconnect to spoof another users identify.
- IBM WebSphere Application Server Liberty
Not analysed yet 6 May 2020
CVE-2020-4329 CVE record

CVSS 4.3 Medium

IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 20.0.0.4 could allow a remote, authenticated attacker to obtain sensitive information, caused by improper parameter ch…
- IBM WebSphere Application Server Liberty
- IBM WebSphere Application Server
Not analysed yet 28 Apr 2020
CVE-2020-4304 CVE record

CVSS 6.1 Medium

IBM WebSphere Application Server - Liberty 17.0.0.3 through 20.0.0.3 is vulnerable to cross-site scripting.
- IBM WebSphere Application Server Liberty
Not analysed yet 2 Apr 2020
CVE-2020-4303 CVE record

CVSS 6.1 Medium

IBM WebSphere Application Server - Liberty 17.0.0.3 through 20.0.0.3 is vulnerable to cross-site scripting.
- IBM WebSphere Application Server Liberty
Not analysed yet 2 Apr 2020
CVE-2018-1553 CVE record

CVSS 5.3 Medium

IBM WebSphere Application Server Liberty: IBM WebSphere Application Server Liberty prior to 18.0.0.2 could allow a remote attacker…
- IBM WebSphere Application Server Liberty
Not analysed yet 27 Jun 2018