Skip to main content

IBM WebSphere Application Multiple Vulnerabilities

Last Update Date: 16 Dec 2019 10:26 Release Date: 16 Dec 2019 5444 Views

RISK: Medium Risk

TYPE: Servers - Internet App Servers

TYPE: Internet App Servers

Multiple vulnerabilities were identified in IBM WebSphere Application Server, a remote attacker could exploit some of these vulnerabilities to trigger denial of service, remote code execution, obtain sensitive information, cross-site scripting and bypass security restriction on the targeted system.


Impact

  • Cross-Site Scripting
  • Denial of Service
  • Remote Code Execution
  • Security Restriction Bypass
  • Information Disclosure

System / Technologies affected

  • IBM WebSphere Application Server Liberty 17.0.0.3 - 19.0.0.11
  • IBM SDK, Java Technology Editions used with IBM WebSphere Application Server Traditional Version 8.5.0.0 - 8.5.5.16 and 9.0.0.0 - 9.0.5.1
  • IBM SDK, Java Technology Editions shipped in Application Client for IBM WebSphere Application Server Version 8.5.0.0 - 8.5.5.16 and 9.0.0.0 - 9.0.5.1

    For other IBM products, please refer to the "Related Link" session below.

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 


Vulnerability Identifier


Source


Related Link