# IBM WebSphere Application Server.

Every CVE that names IBM WebSphere Application Server among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2020-4589.md)
  `CVE-2020-4589` · CVE record: IBM WebSphere Application Server · CVSS 8.1 High · Not analysed yet · Published 13 Aug 2020
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2020-4534.md)
  `CVE-2020-4534` · CVE record: IBM WebSphere Application Server · CVSS 7.8 High · Not analysed yet · Published 3 Aug 2020
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2020-4464.md)
  `CVE-2020-4464` · CVE record: IBM WebSphere Application Server · CVSS 8.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.13 · Not analysed yet · Published 17 Jul 2020
- [IBM WebSphere Application Server: IBM WebSphere Application Server 8.5 and 9.0 traditional could allow a remote attacker to…](https://agentprime.io/advisories/CVE-2020-4450.md)
  `CVE-2020-4450` · CVE record: IBM WebSphere Application Server · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.35 · Not analysed yet · Published 5 Jun 2020
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2020-4449.md)
  `CVE-2020-4449` · CVE record: IBM WebSphere Application Server · CVSS 7.5 High · Not analysed yet · Published 5 Jun 2020
- [IBM WebSphere Application Server: IBM WebSphere Application Server Network Deployment 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2020-4448.md)
  `CVE-2020-4448` · CVE record: IBM WebSphere Application Server · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.13 · Not analysed yet · Published 5 Jun 2020
- [IBM WebSphere Application Server 8.5 is vulnerable to server-side request forgery.](https://agentprime.io/advisories/CVE-2020-4365.md)
  `CVE-2020-4365` · CVE record: IBM WebSphere Application Server · CVSS 5.3 Medium · Not analysed yet · Published 14 May 2020
- [IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 20.0.0.4 could allow a remote, authenticated attacker to obtain sensitive information, caused by improper parameter ch…](https://agentprime.io/advisories/CVE-2020-4329.md)
  `CVE-2020-4329` · CVE record: IBM WebSphere Application Server Liberty and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 28 Apr 2020
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2020-4362.md)
  `CVE-2020-4362` · CVE record: IBM WebSphere Application Server · CVSS 7.5 High · Not analysed yet · Published 10 Apr 2020
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2020-4276.md)
  `CVE-2020-4276` · CVE record: IBM WebSphere Application Server · CVSS 7.5 High · Not analysed yet · Published 26 Mar 2020
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2019-4670.md)
  `CVE-2019-4670` · CVE record: IBM WebSphere Application Server · CVSS 6.5 Medium · Not analysed yet · Published 5 Feb 2020
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0, under specialized conditions…](https://agentprime.io/advisories/CVE-2020-4163.md)
  `CVE-2020-4163` · CVE record: IBM WebSphere Application Server · CVSS 6.6 Medium · Not analysed yet · Published 4 Feb 2020
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2019-4720.md)
  `CVE-2019-4720` · CVE record: IBM WebSphere Application Server · CVSS 7.5 High · Not analysed yet · Published 31 Jan 2020
- [IBM WebSphere Application Server - Liberty is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2019-4663.md)
  `CVE-2019-4663` · CVE record: IBM WebSphere Application Server · CVSS 5.4 Medium · Not analysed yet · Published 10 Dec 2019
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0…](https://agentprime.io/advisories/CVE-2019-4441.md)
  `CVE-2019-4441` · CVE record: IBM WebSphere Application Server · CVSS 5.3 Medium · Not analysed yet · Published 3 Oct 2019
- [IBM WebSphere Application Server: IBM WebSphere Application Server Liberty could allow a remote attacker to obtain…](https://agentprime.io/advisories/CVE-2019-4305.md)
  `CVE-2019-4305` · CVE record: IBM WebSphere Application Server · CVSS 5.3 Medium · Not analysed yet · Published 30 Sept 2019
- [IBM WebSphere Application Server: IBM WebSphere Application Server - Liberty could allow a remote attacker to bypass…](https://agentprime.io/advisories/CVE-2019-4304.md)
  `CVE-2019-4304` · CVE record: IBM WebSphere Application Server · CVSS 6.3 Medium · Not analysed yet · Published 30 Sept 2019
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2019-4505.md)
  `CVE-2019-4505` · CVE record: IBM WebSphere Application Server · CVSS 3.7 Low · Not analysed yet · Published 20 Sept 2019
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2019-4477.md)
  `CVE-2019-4477` · CVE record: IBM WebSphere Application Server · CVSS 5.3 Medium · Not analysed yet · Published 17 Sept 2019
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2019-4442.md)
  `CVE-2019-4442` · CVE record: IBM WebSphere Application Server · CVSS 4.3 Medium · Not analysed yet · Published 17 Sept 2019
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2019-4271.md)
  `CVE-2019-4271` · CVE record: IBM WebSphere Application Server · CVSS 3.5 Low · Not analysed yet · Published 17 Sept 2019
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2019-4270.md)
  `CVE-2019-4270` · CVE record: IBM WebSphere Application Server · CVSS 5.4 Medium · Not analysed yet · Published 17 Sept 2019
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2019-4268.md)
  `CVE-2019-4268` · CVE record: IBM WebSphere Application Server · CVSS 5.3 Medium · Not analysed yet · Published 17 Sept 2019
- [IBM WebSphere Application Server: IBM WebSphere Application Server - Liberty Admin Center could allow a remote attacker to…](https://agentprime.io/advisories/CVE-2019-4285.md)
  `CVE-2019-4285` · CVE record: IBM WebSphere Application Server · CVSS 5.4 Medium · Not analysed yet · Published 30 Jul 2019
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2019-4269.md)
  `CVE-2019-4269` · CVE record: IBM WebSphere Application Server · CVSS 5.3 Medium · Not analysed yet · Published 28 Jun 2019
- [IBM WebSphere Application Server: IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to execute…](https://agentprime.io/advisories/CVE-2019-4279.md)
  `CVE-2019-4279` · CVE record: IBM WebSphere Application Server · CVSS 9.0 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.80 · Not analysed yet · Published 17 May 2019
- [IBM WebSphere Application Server: IBM WebSphere Application Server Admin Console 7.5, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2019-4080.md)
  `CVE-2019-4080` · CVE record: IBM WebSphere Application Server · CVSS 6.5 Medium · Not analysed yet · Published 2 Apr 2019
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2019-4046.md)
  `CVE-2019-4046` · CVE record: IBM WebSphere Application Server · CVSS 5.9 Medium · Not analysed yet · Published 25 Mar 2019
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2018-1902.md)
  `CVE-2018-1902` · CVE record: IBM WebSphere Application Server · CVSS 3.1 Low · Not analysed yet · Published 11 Mar 2019
- [IBM SDK, Java Technology Edition Version 8 on the AIX platform uses absolute RPATHs which may facilitate code injection and privilege elevation by local users.](https://agentprime.io/advisories/CVE-2018-1890.md)
  `CVE-2018-1890` · CVE record: IBM WebSphere Application Server Patterns and 2 more · CVSS 5.6 Medium · Not analysed yet · Published 11 Mar 2019
- [IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2019-4030.md)
  `CVE-2019-4030` · CVE record: IBM WebSphere Application Server · CVSS 5.4 Medium · Not analysed yet · Published 6 Mar 2019
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2018-1996.md)
  `CVE-2018-1996` · CVE record: IBM WebSphere Application Server · CVSS 5.3 Medium · Not analysed yet · Published 19 Feb 2019
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2018-1926.md)
  `CVE-2018-1926` · CVE record: IBM WebSphere Application Server · CVSS 4.3 Medium · Not analysed yet · Published 12 Dec 2018
- [IBM WebSphere Application Server: IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to temporarily…](https://agentprime.io/advisories/CVE-2018-1901.md)
  `CVE-2018-1901` · CVE record: IBM WebSphere Application Server · CVSS 5.0 Medium · Not analysed yet · Published 12 Dec 2018
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2018-1904.md)
  `CVE-2018-1904` · CVE record: IBM WebSphere Application Server · CVSS 8.1 High · Not analysed yet · Published 11 Dec 2018
- [IBM WebSphere Application Server: IBM WebSphere Application Server 9 could allow sensitive information to be available…](https://agentprime.io/advisories/CVE-2018-1957.md)
  `CVE-2018-1957` · CVE record: IBM WebSphere Application Server · CVSS 4.0 Medium · Not analysed yet · Published 10 Dec 2018
- [IBM WebSphere Application Server: IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to gain…](https://agentprime.io/advisories/CVE-2018-1840.md)
  `CVE-2018-1840` · CVE record: IBM WebSphere Application Server · CVSS 6.0 Medium · Not analysed yet · Published 3 Dec 2018
- [IBM WebSphere Application Server: IBM WebSphere Application Server 9.0.0.0 through 9.0.0.9 is vulnerable to a XML External…](https://agentprime.io/advisories/CVE-2018-1905.md)
  `CVE-2018-1905` · CVE record: IBM WebSphere Application Server · CVSS 7.1 High · Not analysed yet · Published 26 Nov 2018
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2018-1797.md)
  `CVE-2018-1797` · CVE record: IBM WebSphere Application Server · CVSS 6.3 Medium · Not analysed yet · Published 16 Nov 2018
- [IBM WebSphere Application Server: The Installation Verification Tool of IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2018-1643.md)
  `CVE-2018-1643` · CVE record: IBM WebSphere Application Server · CVSS 6.1 Medium · Not analysed yet · Published 15 Nov 2018
- [IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2018-1798.md)
  `CVE-2018-1798` · CVE record: IBM WebSphere Application Server · CVSS 6.1 Medium · Not analysed yet · Published 12 Nov 2018
- [IBM WebSphere Application Server: IBM WebSphere Application Server Liberty OpenID Connect could allow a remote attacker to…](https://agentprime.io/advisories/CVE-2018-1851.md)
  `CVE-2018-1851` · CVE record: IBM WebSphere Application Server · CVSS 7.3 High · Not analysed yet · Published 31 Oct 2018
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2018-1767.md)
  `CVE-2018-1767` · CVE record: IBM WebSphere Application Server · CVSS 6.1 Medium · Not analysed yet · Published 29 Oct 2018
- [IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2018-1777.md)
  `CVE-2018-1777` · CVE record: IBM WebSphere Application Server · CVSS 5.4 Medium · Not analysed yet · Published 16 Oct 2018
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2018-1770.md)
  `CVE-2018-1770` · CVE record: IBM WebSphere Application Server · CVSS 6.5 Medium · Not analysed yet · Published 12 Oct 2018
- [IBM WebSphere Application Server: IBM WebSphere Application Server 8.5 and 9.0 in IBM Cloud could allow a remote attacker…](https://agentprime.io/advisories/CVE-2018-1838.md)
  `CVE-2018-1838` · CVE record: IBM WebSphere Application Server · CVSS 5.3 Medium · Not analysed yet · Published 12 Oct 2018
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2018-1794.md)
  `CVE-2018-1794` · CVE record: IBM WebSphere Application Server · CVSS 6.1 Medium · Not analysed yet · Published 3 Oct 2018
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2018-1793.md)
  `CVE-2018-1793` · CVE record: IBM WebSphere Application Server · CVSS 6.1 Medium · Not analysed yet · Published 3 Oct 2018
- [IBM WebSphere Application Server: IBM WebSphere Application Server Liberty could allow a remote attacker to obtain…](https://agentprime.io/advisories/CVE-2018-1683.md)
  `CVE-2018-1683` · CVE record: IBM WebSphere Application Server · CVSS 5.9 Medium · Not analysed yet · Published 26 Sept 2018
- [IBM WebSphere Application Server: IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security…](https://agentprime.io/advisories/CVE-2018-1719.md)
  `CVE-2018-1719` · CVE record: IBM WebSphere Application Server · CVSS 5.9 Medium · Not analysed yet · Published 14 Sept 2018
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2018-1567.md)
  `CVE-2018-1567` · CVE record: IBM WebSphere Application Server · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Sept 2018
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0…](https://agentprime.io/advisories/CVE-2018-1695.md)
  `CVE-2018-1695` · CVE record: IBM WebSphere Application Server · CVSS 7.3 High · Not analysed yet · Published 6 Sept 2018
- [IBM WebSphere Application Server: IBM WebSphere Application Server Liberty could allow a remote attacker to obtain…](https://agentprime.io/advisories/CVE-2018-1755.md)
  `CVE-2018-1755` · CVE record: IBM WebSphere Application Server · CVSS 5.9 Medium · Not analysed yet · Published 24 Aug 2018
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2018-1621.md)
  `CVE-2018-1621` · CVE record: IBM WebSphere Application Server · CVSS 4.4 Medium · Not analysed yet · Published 6 Jul 2018
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2018-1614.md)
  `CVE-2018-1614` · CVE record: IBM WebSphere Application Server · CVSS 5.8 Medium · Not analysed yet · Published 26 Jun 2018
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2017-1743.md)
  `CVE-2017-1743` · CVE record: IBM WebSphere Application Server · No CVSS score · Not analysed yet · Published 4 May 2018
- [IBM WebSphere Application Server: IBM WebSphere Application Server 9 installations using Form Login could allow a remote…](https://agentprime.io/advisories/CVE-2017-1788.md)
  `CVE-2017-1788` · CVE record: IBM WebSphere Application Server · CVSS 5.3 Medium · Not analysed yet · Published 22 Mar 2018
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2017-1741.md)
  `CVE-2017-1741` · CVE record: IBM WebSphere Application Server · CVSS 4.3 Medium · Not analysed yet · Published 14 Mar 2018
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2017-1731.md)
  `CVE-2017-1731` · CVE record: IBM WebSphere Application Server · No CVSS score · Not analysed yet · Published 30 Jan 2018
- [IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…](https://agentprime.io/advisories/CVE-2017-1503.md)
  `CVE-2017-1503` · CVE record: IBM IBM WebSphere Application Server · No CVSS score · Not analysed yet · Published 10 Oct 2017

Newest: <https://agentprime.io/advisories/technology/ibm-websphere-application-server.md>
Older: <https://agentprime.io/advisories/technology/ibm-websphere-application-server.md?cursor=WyIyMDE3LTEwLTEwVDIxOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAxNy0xNTAzIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=ibm-websphere-application-server&cursor=WyIyMDIwLTA5LTEwVDE2OjUwOjEzLjk2NTAwMFoiLCJDVkUtMjAyMC00NTc4Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/ibm-websphere-application-server/?cursor=WyIyMDIwLTA5LTEwVDE2OjUwOjEzLjk2NTAwMFoiLCJDVkUtMjAyMC00NTc4Il0>. Everything for agents: <https://agentprime.io/llms.txt>.