Advisories · Technology

IBM WebSphere Application Server.

Every CVE that names IBM WebSphere Application Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2020-4589 CVE record

CVSS 8.1 High

IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…
- IBM WebSphere Application Server
Not analysed yet 13 Aug 2020
CVE-2020-4534 CVE record

CVSS 7.8 High

IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…
- IBM WebSphere Application Server
Not analysed yet 3 Aug 2020
CVE-2020-4464 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…
- IBM WebSphere Application Server
Not analysed yet 17 Jul 2020
CVE-2020-4450 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

IBM WebSphere Application Server: IBM WebSphere Application Server 8.5 and 9.0 traditional could allow a remote attacker to…
- IBM WebSphere Application Server
Not analysed yet 5 Jun 2020
CVE-2020-4449 CVE record

CVSS 7.5 High

IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…
- IBM WebSphere Application Server
Not analysed yet 5 Jun 2020
CVE-2020-4448 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

IBM WebSphere Application Server: IBM WebSphere Application Server Network Deployment 7.0, 8.0, 8.5…
- IBM WebSphere Application Server
Not analysed yet 5 Jun 2020
CVE-2020-4365 CVE record

CVSS 5.3 Medium

IBM WebSphere Application Server 8.5 is vulnerable to server-side request forgery.
- IBM WebSphere Application Server
Not analysed yet 14 May 2020
CVE-2020-4329 CVE record

CVSS 4.3 Medium

IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 20.0.0.4 could allow a remote, authenticated attacker to obtain sensitive information, caused by improper parameter ch…
- IBM WebSphere Application Server Liberty
- IBM WebSphere Application Server
Not analysed yet 28 Apr 2020
CVE-2020-4362 CVE record

CVSS 7.5 High

IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…
- IBM WebSphere Application Server
Not analysed yet 10 Apr 2020
CVE-2020-4276 CVE record

CVSS 7.5 High

IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…
- IBM WebSphere Application Server
Not analysed yet 26 Mar 2020
CVE-2019-4670 CVE record

CVSS 6.5 Medium

IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…
- IBM WebSphere Application Server
Not analysed yet 5 Feb 2020
CVE-2020-4163 CVE record

CVSS 6.6 Medium

IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0, under specialized conditions…
- IBM WebSphere Application Server
Not analysed yet 4 Feb 2020
CVE-2019-4720 CVE record

CVSS 7.5 High

IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…
- IBM WebSphere Application Server
Not analysed yet 31 Jan 2020
CVE-2019-4663 CVE record

CVSS 5.4 Medium

IBM WebSphere Application Server - Liberty is vulnerable to cross-site scripting.
- IBM WebSphere Application Server
Not analysed yet 10 Dec 2019
CVE-2019-4441 CVE record

CVSS 5.3 Medium

IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0…
- IBM WebSphere Application Server
Not analysed yet 3 Oct 2019
CVE-2019-4305 CVE record

CVSS 5.3 Medium

IBM WebSphere Application Server: IBM WebSphere Application Server Liberty could allow a remote attacker to obtain…
- IBM WebSphere Application Server
Not analysed yet 30 Sept 2019
CVE-2019-4304 CVE record

CVSS 6.3 Medium

IBM WebSphere Application Server: IBM WebSphere Application Server - Liberty could allow a remote attacker to bypass…
- IBM WebSphere Application Server
Not analysed yet 30 Sept 2019
CVE-2019-4505 CVE record

CVSS 3.7 Low

IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…
- IBM WebSphere Application Server
Not analysed yet 20 Sept 2019
CVE-2019-4477 CVE record

CVSS 5.3 Medium

IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…
- IBM WebSphere Application Server
Not analysed yet 17 Sept 2019
CVE-2019-4442 CVE record

CVSS 4.3 Medium

IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…
- IBM WebSphere Application Server
Not analysed yet 17 Sept 2019
CVE-2019-4271 CVE record

CVSS 3.5 Low

IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…
- IBM WebSphere Application Server
Not analysed yet 17 Sept 2019
CVE-2019-4270 CVE record

CVSS 5.4 Medium

IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…
- IBM WebSphere Application Server
Not analysed yet 17 Sept 2019
CVE-2019-4268 CVE record

CVSS 5.3 Medium

IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…
- IBM WebSphere Application Server
Not analysed yet 17 Sept 2019
CVE-2019-4285 CVE record

CVSS 5.4 Medium

IBM WebSphere Application Server: IBM WebSphere Application Server - Liberty Admin Center could allow a remote attacker to…
- IBM WebSphere Application Server
Not analysed yet 30 Jul 2019
CVE-2019-4269 CVE record

CVSS 5.3 Medium

IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…
- IBM WebSphere Application Server
Not analysed yet 28 Jun 2019
CVE-2019-4279 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

IBM WebSphere Application Server: IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to execute…
- IBM WebSphere Application Server
Not analysed yet 17 May 2019
CVE-2019-4080 CVE record

CVSS 6.5 Medium

IBM WebSphere Application Server: IBM WebSphere Application Server Admin Console 7.5, 8.0, 8.5…
- IBM WebSphere Application Server
Not analysed yet 2 Apr 2019
CVE-2019-4046 CVE record

CVSS 5.9 Medium

IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…
- IBM WebSphere Application Server
Not analysed yet 25 Mar 2019
CVE-2018-1902 CVE record

CVSS 3.1 Low

IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…
- IBM WebSphere Application Server
Not analysed yet 11 Mar 2019
CVE-2018-1890 CVE record

CVSS 5.6 Medium

IBM SDK, Java Technology Edition Version 8 on the AIX platform uses absolute RPATHs which may facilitate code injection and privilege elevation by local users.
- IBM WebSphere Application Server Patterns
- IBM WebSphere Application Server
Not analysed yet 11 Mar 2019
CVE-2019-4030 CVE record

CVSS 5.4 Medium

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting.
- IBM WebSphere Application Server
Not analysed yet 6 Mar 2019
CVE-2018-1996 CVE record

CVSS 5.3 Medium

IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…
- IBM WebSphere Application Server
Not analysed yet 19 Feb 2019
CVE-2018-1926 CVE record

CVSS 4.3 Medium

IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…
- IBM WebSphere Application Server
Not analysed yet 12 Dec 2018
CVE-2018-1901 CVE record

CVSS 5.0 Medium

IBM WebSphere Application Server: IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to temporarily…
- IBM WebSphere Application Server
Not analysed yet 12 Dec 2018
CVE-2018-1904 CVE record

CVSS 8.1 High

IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…
- IBM WebSphere Application Server
Not analysed yet 11 Dec 2018
CVE-2018-1957 CVE record

CVSS 4.0 Medium

IBM WebSphere Application Server: IBM WebSphere Application Server 9 could allow sensitive information to be available…
- IBM WebSphere Application Server
Not analysed yet 10 Dec 2018
CVE-2018-1840 CVE record

CVSS 6.0 Medium

IBM WebSphere Application Server: IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to gain…
- IBM WebSphere Application Server
Not analysed yet 3 Dec 2018
CVE-2018-1905 CVE record

CVSS 7.1 High

IBM WebSphere Application Server: IBM WebSphere Application Server 9.0.0.0 through 9.0.0.9 is vulnerable to a XML External…
- IBM WebSphere Application Server
Not analysed yet 26 Nov 2018
CVE-2018-1797 CVE record

CVSS 6.3 Medium

IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…
- IBM WebSphere Application Server
Not analysed yet 16 Nov 2018
CVE-2018-1643 CVE record

CVSS 6.1 Medium

IBM WebSphere Application Server: The Installation Verification Tool of IBM WebSphere Application Server 7.0, 8.0, 8.5…
- IBM WebSphere Application Server
Not analysed yet 15 Nov 2018
CVE-2018-1798 CVE record

CVSS 6.1 Medium

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting.
- IBM WebSphere Application Server
Not analysed yet 12 Nov 2018
CVE-2018-1851 CVE record

CVSS 7.3 High

IBM WebSphere Application Server: IBM WebSphere Application Server Liberty OpenID Connect could allow a remote attacker to…
- IBM WebSphere Application Server
Not analysed yet 31 Oct 2018
CVE-2018-1767 CVE record

CVSS 6.1 Medium

IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…
- IBM WebSphere Application Server
Not analysed yet 29 Oct 2018
CVE-2018-1777 CVE record

CVSS 5.4 Medium

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting.
- IBM WebSphere Application Server
Not analysed yet 16 Oct 2018
CVE-2018-1770 CVE record

CVSS 6.5 Medium

IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…
- IBM WebSphere Application Server
Not analysed yet 12 Oct 2018
CVE-2018-1838 CVE record

CVSS 5.3 Medium

IBM WebSphere Application Server: IBM WebSphere Application Server 8.5 and 9.0 in IBM Cloud could allow a remote attacker…
- IBM WebSphere Application Server
Not analysed yet 12 Oct 2018
CVE-2018-1794 CVE record

CVSS 6.1 Medium

IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…
- IBM WebSphere Application Server
Not analysed yet 3 Oct 2018
CVE-2018-1793 CVE record

CVSS 6.1 Medium

IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…
- IBM WebSphere Application Server
Not analysed yet 3 Oct 2018
CVE-2018-1683 CVE record

CVSS 5.9 Medium

IBM WebSphere Application Server: IBM WebSphere Application Server Liberty could allow a remote attacker to obtain…
- IBM WebSphere Application Server
Not analysed yet 26 Sept 2018
CVE-2018-1719 CVE record

CVSS 5.9 Medium

IBM WebSphere Application Server: IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security…
- IBM WebSphere Application Server
Not analysed yet 14 Sept 2018
CVE-2018-1567 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…
- IBM WebSphere Application Server
Not analysed yet 7 Sept 2018
CVE-2018-1695 CVE record

CVSS 7.3 High

IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0…
- IBM WebSphere Application Server
Not analysed yet 6 Sept 2018
CVE-2018-1755 CVE record

CVSS 5.9 Medium

IBM WebSphere Application Server: IBM WebSphere Application Server Liberty could allow a remote attacker to obtain…
- IBM WebSphere Application Server
Not analysed yet 24 Aug 2018
CVE-2018-1621 CVE record

CVSS 4.4 Medium

IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…
- IBM WebSphere Application Server
Not analysed yet 6 Jul 2018
CVE-2018-1614 CVE record

CVSS 5.8 Medium

IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…
- IBM WebSphere Application Server
Not analysed yet 26 Jun 2018
CVE-2017-1743 CVE record

IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…
- IBM WebSphere Application Server
Not analysed yet 4 May 2018
CVE-2017-1788 CVE record

CVSS 5.3 Medium

IBM WebSphere Application Server: IBM WebSphere Application Server 9 installations using Form Login could allow a remote…
- IBM WebSphere Application Server
Not analysed yet 22 Mar 2018
CVE-2017-1741 CVE record

CVSS 4.3 Medium

IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…
- IBM WebSphere Application Server
Not analysed yet 14 Mar 2018
CVE-2017-1731 CVE record

IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…
- IBM WebSphere Application Server
Not analysed yet 30 Jan 2018
CVE-2017-1503 CVE record

IBM WebSphere Application Server: IBM WebSphere Application Server 7.0, 8.0, 8.5…
- IBM WebSphere Application Server
Not analysed yet 10 Oct 2017