Summary
| Detail | |||
|---|---|---|---|
| Vendor | Ibm | First view | 2005-11-03 |
| Product | Websphere Application Server | Last view | 2025-08-14 |
| Version | 5.0.2.10 | Type | Application |
| Update | * | ||
| Edition | * | ||
| Language | * | ||
| Sofware Edition | * | ||
| Target Software | * | ||
| Target Hardware | * | ||
| Other | * | ||
| CPE Product | cpe:2.3:a:ibm:websphere_application_server | ||
Activity : Overall
Related : CVE
| Date | Alert | Description | |
|---|---|---|---|
| 7.5 | 2025-08-14 | CVE-2025-36047 | IBM WebSphere Application Server Liberty 18.0.0.2 through 25.0.0.8 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. |
| 7.5 | 2025-08-14 | CVE-2025-33142 | IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security for TLS connections. |
| 7.5 | 2025-08-12 | CVE-2025-36124 | IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.8 could allow a remote attacker to bypass security restrictions caused by a failure to honor JMS messaging configuration |
| 4.8 | 2025-08-12 | CVE-2025-36000 | IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.8 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. |
| 7.5 | 2025-08-07 | CVE-2024-56339 | IBM WebSphere Application Server 9.0 and WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.7Â could allow a remote attacker to bypass security restrictions caused by a failure to honor security configuration. |
| 0 | 2025-07-16 | CVE-2025-36097 | IBM WebSphere Application Server 9.0 and WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.7 are vulnerable to a denial of service, caused by a stack-based overflow. An attacker can send a specially crafted request that cause the server to consume excessive memory resources. |
| 9.8 | 2025-06-25 | CVE-2025-36038 | IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to execute arbitrary code on the system with a specially crafted sequence of serialized objects. |
| 7.6 | 2025-05-14 | CVE-2025-33104 | IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. |
| 2.7 | 2025-04-22 | CVE-2025-27907 | IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. |
| 5.5 | 2024-11-04 | CVE-2024-45086 | IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A privileged user could exploit this vulnerability to expose sensitive information or consume memory resources. |
| 5.5 | 2024-10-16 | CVE-2024-45072 | IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A privileged user could exploit this vulnerability to expose sensitive information or consume memory resources. |
| 4.8 | 2024-10-16 | CVE-2024-45071 | IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. |
| 7.5 | 2024-10-15 | CVE-2024-45085 | IBM WebSphere Application Server 8.5 is vulnerable to a denial of service, under certain configurations, caused by an unexpected specially crafted request. A remote attacker could exploit this vulnerability to cause an error resulting in a denial of service. |
| 7.5 | 2024-08-14 | CVE-2023-50314 | IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.8 could allow an attacker with access to the network to conduct spoofing attacks. An attacker could exploit this vulnerability using a certificate issued by a trusted authority to obtain sensitive information. IBM X-Force ID: 274713. |
| 7.2 | 2024-07-09 | CVE-2024-35154 | IBM WebSphere Application Server 8.5 and 9.0 could allow a remote authenticated attacker, who has authorized access to the administrative console, to execute arbitrary code. Using specially crafted input, the attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 292641. |
| 4.8 | 2024-06-27 | CVE-2024-35153 | IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 292640. |
| 7.5 | 2024-04-25 | CVE-2024-25026 | IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.4 are vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 281516. |
| 7 | 2024-04-17 | CVE-2024-22354 | IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.5 are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information, consume memory resources, or to conduct a server-side request forgery attack. IBM X-Force ID: 280401. |
| 4.3 | 2024-04-17 | CVE-2024-22329 | IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.3 are vulnerable to server-side request forgery (SSRF). By sending a specially crafted request, an attacker could exploit this vulnerability to conduct the SSRF attack. X-Force ID: 279951. |
| 7.5 | 2024-04-04 | CVE-2024-27268 | IBM WebSphere Application Server Liberty 18.0.0.2 through 24.0.0.4 is vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 284574. |
| 7.5 | 2024-03-31 | CVE-2024-22353 | IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.4 is vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 280400. |
| 6.1 | 2024-03-27 | CVE-2024-27270 | IBM WebSphere Application Server Liberty 23.0.0.3 through 24.0.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in a specially crafted URI. IBM X-Force ID: 284576. |
| 6.5 | 2024-03-01 | CVE-2023-50312 | IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.2 could provide weaker than expected security for outbound TLS connections caused by a failure to honor user configuration. IBM X-Force ID: 274711. |
| 7.5 | 2023-08-16 | CVE-2023-38737 | IBM WebSphere Application Server Liberty 22.0.0.13 through 23.0.0.7 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 262567. |
| 6.3 | 2023-05-11 | CVE-2023-27554 | IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 249185. |
CWE : Common Weakness Enumeration
| % | id | Name |
|---|---|---|
| 20% (25) | CWE-79 | Failure to Preserve Web Page Structure ('Cross-site Scripting') |
| 10% (13) | CWE-200 | Information Exposure |
| 10% (12) | CWE-611 | Information Leak Through XML External Entity File Disclosure |
| 8% (10) | CWE-502 | Deserialization of Untrusted Data |
| 5% (7) | CWE-264 | Permissions, Privileges, and Access Controls |
| 5% (7) | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path ... |
| 4% (5) | CWE-770 | Allocation of Resources Without Limits or Throttling |
| 4% (5) | CWE-399 | Resource Management Errors |
| 2% (3) | CWE-400 | Uncontrolled Resource Consumption ('Resource Exhaustion') |
| 2% (3) | CWE-352 | Cross-Site Request Forgery (CSRF) |
| 2% (3) | CWE-327 | Use of a Broken or Risky Cryptographic Algorithm |
| 2% (3) | CWE-290 | Authentication Bypass by Spoofing |
| 2% (3) | CWE-209 | Information Exposure Through an Error Message |
| 2% (3) | CWE-20 | Improper Input Validation |
| 1% (2) | CWE-310 | Cryptographic Issues |
| 1% (2) | CWE-74 | Failure to Sanitize Data into a Different Plane ('Injection') |
| 0% (1) | CWE-754 | Improper Check for Unusual or Exceptional Conditions |
| 0% (1) | CWE-668 | Exposure of Resource to Wrong Sphere |
| 0% (1) | CWE-565 | Reliance on Cookies without Validation and Integrity Checking |
| 0% (1) | CWE-384 | Session Fixation |
| 0% (1) | CWE-311 | Missing Encryption of Sensitive Data |
| 0% (1) | CWE-307 | Improper Restriction of Excessive Authentication Attempts |
| 0% (1) | CWE-295 | Certificate Issues |
| 0% (1) | CWE-276 | Incorrect Default Permissions |
| 0% (1) | CWE-269 | Improper Privilege Management |
Open Source Vulnerability Database (OSVDB)
| id | Description |
|---|---|
| 73378 | IBM WebSphere Application Server (WAS) JavaServer Pages org.apache.jasper.run... |
| 73354 | IBM WebSphere Application Server (WAS) HTTP Transport SIP Proxy UDP Message S... |
| 73353 | IBM WebSphere Application Server (WAS) Messaging Engine JMS Receive Call NULL... |
| 73352 | IBM WebSphere Application Server (WAS) Service Integration Bus (SIB) Messagin... |
| 73348 | IBM WebSphere Application Server (WAS) Security Component ibm-application-bnd... |
| 73346 | IBM WebSphere Application Server (WAS) HTTP Server Plugin Trace Request XSS |
| 73341 | IBM WebSphere Application Server (WAS) Installer Temporary Log Directory Perm... |
| 73052 | IBM WebSphere Application Server Admin Security Disable CSRF |
| 71456 | IBM WebSphere Application Server IVT Unspecified XSS |
| 65653 | IBM WebSphere Application Server (WAS) on z/OS default_create.log BBOWWPFx Jo... |
| 65652 | IBM WebSphere Application Server (WAS) on z/OS Unspecified Link Injection |
| 65651 | IBM WebSphere Application Server (WAS) on z/OS Admin Console Unspecified XSS |
| 63480 | IBM WebSphere Application Server (WAS) Administration Console URI XSS |
| 63308 | IBM WebSphere Application Server Orb Client SSL Handshake Remote DoS |
| 63307 | IBM WebSphere Application Server J2CConnectionFactory Object Cleartext Passwo... |
| 62674 | Apache HTTP Server mod_isapi Module Unloading Crafted Request Remote DoS |
| 55079 | IBM WebSphere Multiple Products Migration IsSecurityEnabled Flag Unspecified ... |
| 55077 | IBM WebSphere Application Server (WAS) Administrative Console Component Confi... |
| 55076 | IBM WebSphere Application Server (WAS) System Management/Repository Component... |
| 55075 | IBM WebSphere Application Server (WAS) Security Component Non-standard HTTP M... |
| 55074 | IBM WebSphere Application Server (WAS) Administrative Console Component Secur... |
| 53990 | IBM WebSphere Application Server (WAS) ibm_security_logout Servlet logoutExit... |
| 53979 | IBM WebSphere Application Server (WAS) WebContainer Component Unspecified CRL... |
| 52600 | IBM WebSphere Application Server (WAS) Web Services WSPolicy IDAssertion.isUs... |
| 52599 | IBM WebSphere Application Server (WAS) on Windows JSP Handling Unspecified Ex... |
ExploitDB Exploits
| id | Description |
|---|---|
| 17404 | IBM WebSphere Application Server 7.0.0.13 CSRF Vulnerability |
| 14288 | Write-to-file Shellcode (Win32) |
| 11650 | Apache 2.2.14 mod_isapi Dangling Pointer Remote SYSTEM Exploit |
OpenVAS Exploits
| id | Description |
|---|---|
| 2012-05-11 | Name : IBM WebSphere Application Server 'plugin-key.kdb' Information Disclosure Vuln... File : nvt/gb_ibm_was_plugin_key_info_disc_vuln.nasl |
| 2011-07-22 | Name : IBM WebSphere Application Server Multiple CSRF Vulnerabilities File : nvt/secpod_ibm_was_admin_console_csrf_vuln.nasl |
| 2011-03-22 | Name : IBM WebSphere Application Server (WAS) Multiple Vulnerabilities - March 2011 File : nvt/gb_ibm_was_mult_vuln_mar11.nasl |
| 2010-04-01 | Name : IBM WebSphere Application Server multiple vulnerabilities File : nvt/gb_ibm_websphere_mult_vuln.nasl |
| 2010-03-04 | Name : Apache Multiple Security Vulnerabilities File : nvt/gb_apache_38494.nasl |
| 0000-00-00 | Name : Slackware Advisory SSA:2010-067-01 httpd File : nvt/esoft_slk_ssa_2010_067_01.nasl |
Snort® IPS/IDS
| Date | Description |
|---|---|
| 2019-07-18 | IBM WebSphere Application Server remote code execution attempt RuleID : 50455 - Type : SERVER-WEBAPP - Revision : 2 |
| 2014-01-10 | Apache mod_isapi dangling pointer exploit attempt RuleID : 19124 - Type : SERVER-APACHE - Revision : 7 |
| 2014-01-10 | Apache mod_isapi dangling pointer code execution attempt RuleID : 19107 - Type : SERVER-APACHE - Revision : 10 |
| 2014-01-10 | Apache mod_isapi dangling pointer exploit attempt RuleID : 16480 - Type : SERVER-APACHE - Revision : 5 |
| 2014-01-10 | Apache mod_isapi dangling pointer exploit attempt - public shell code RuleID : 16479 - Type : SERVER-APACHE - Revision : 5 |
Nessus® Vulnerability Scanner
| id | Description |
|---|---|
| 2017-10-31 | Name: The remote SUSE host is missing one or more security updates. File: suse_SU-2017-2907-1.nasl - Type: ACT_GATHER_INFO |
| 2017-08-04 | Name: The remote web application server is affected by an insecure file permissions... File: websphere_cve-2017-1382.nasl - Type: ACT_GATHER_INFO |
| 2017-08-04 | Name: The remote web application server is affected by an information disclosure vu... File: websphere_cve-2017-1381.nasl - Type: ACT_GATHER_INFO |
| 2017-08-04 | Name: The remote web application server is affected by a cross-site scripting vulne... File: websphere_cve-2017-1380.nasl - Type: ACT_GATHER_INFO |
| 2013-09-20 | Name: The remote application server may be affected by multiple vulnerabilities. File: websphere_6_1_0_47.nasl - Type: ACT_GATHER_INFO |
| 2013-08-11 | Name: The remote web server may be affected by multiple vulnerabilities. File: oracle_http_server_cpu_jul_2013.nasl - Type: ACT_GATHER_INFO |
| 2013-07-23 | Name: The remote application server may be affected by multiple vulnerabilities. File: websphere_8_5_5.nasl - Type: ACT_GATHER_INFO |
| 2013-07-19 | Name: The remote application server is potentially affected by multiple vulnerabili... File: websphere_7_0_0_29.nasl - Type: ACT_GATHER_INFO |
| 2013-05-10 | Name: The remote application server may be affected by multiple vulnerabilities. File: websphere_8_5_0_2.nasl - Type: ACT_GATHER_INFO |
| 2013-05-10 | Name: The remote application server may be affected by multiple vulnerabilities. File: websphere_8_0_0_6.nasl - Type: ACT_GATHER_INFO |
| 2012-11-20 | Name: The remote application server may be affected by multiple vulnerabilities. File: websphere_8_5_0_1.nasl - Type: ACT_GATHER_INFO |
| 2012-04-04 | Name: The remote application server may be affected by multiple vulnerabilities. File: websphere_8_0_0_2.nasl - Type: ACT_GATHER_INFO |
| 2012-04-04 | Name: The remote application server may be affected by multiple vulnerabilities. File: websphere_7_0_0_21.nasl - Type: ACT_GATHER_INFO |
| 2012-04-04 | Name: The remote application server is affected by multiple vulnerabilities. File: websphere_6_1_0_43.nasl - Type: ACT_GATHER_INFO |
| 2011-04-18 | Name: The remote application server is affected by multiple vulnerabilities. File: websphere_6_1_0_37.nasl - Type: ACT_GATHER_INFO |
| 2011-03-10 | Name: The remote application server is affected by multiple vulnerabilities. File: websphere_7_0_0_15.nasl - Type: ACT_GATHER_INFO |
| 2010-10-20 | Name: The remote web server is affected by multiple vulnerabilities. File: apache_2_0_64.nasl - Type: ACT_GATHER_INFO |
| 2010-10-20 | Name: The remote web server is affected by multiple vulnerabilities File: apache_2_2_15.nasl - Type: ACT_GATHER_INFO |
| 2010-06-22 | Name: The remote application server is affected by multiple vulnerabilities. File: websphere_7_0_0_11.nasl - Type: ACT_GATHER_INFO |
| 2010-04-06 | Name: The remote application server is affected by multiple vulnerabilities. File: websphere_6_1_0_31.nasl - Type: ACT_GATHER_INFO |
| 2010-04-06 | Name: The remote application server is affected by multiple vulnerabilities. File: websphere_7_0_0_9.nasl - Type: ACT_GATHER_INFO |
| 2010-04-06 | Name: The remote application server is affected by multiple vulnerabilities. File: websphere_6_0_2_41.nasl - Type: ACT_GATHER_INFO |
| 2010-04-05 | Name: The remote application server is affected by multiple vulnerabilities. File: websphere_6_0_2_25.nasl - Type: ACT_GATHER_INFO |
| 2010-04-05 | Name: The remote application server is affected by an HTTP response splitting vulne... File: websphere_6_0_2_19.nasl - Type: ACT_GATHER_INFO |
| 2010-04-05 | Name: The remote application server is affected by multiple vulnerabilities. File: websphere_6_0_2_21.nasl - Type: ACT_GATHER_INFO |
