CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2024-22353 – IBM WebSphere Application Server Liberty denial of service
https://notcve.org/view.php?id=CVE-2024-22353
31 Mar 2024 — IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.4 is vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 280400. IBM WebSphere Application Server Liberty 17.0.0.3 a 24.0.0.3 es vulnerable a una denegación de servicio provocada por el envío de una solicitud especialmente manipulada. Un atacante remoto podría aprovechar esta vulnerabilidad para hace... • https://exchange.xforce.ibmcloud.com/vulnerabilities/280400 • CWE-770: Allocation of Resources Without Limits or Throttling •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2023-38737 – IBM WebSphere Application Server Liberty denial of service
https://notcve.org/view.php?id=CVE-2023-38737
16 Aug 2023 — IBM WebSphere Application Server Liberty 22.0.0.13 through 23.0.0.7 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 262567. IBM WebSphere Application Server Liberty 22.0.0.13 a 23.0.0.7 es vulnerable a una denegación de servicio provocada por el envío de una solicitud especialmente diseñada. Un atacante remoto podría aprovechar esta vulnerabilidad para hace... • https://exchange.xforce.ibmcloud.com/vulnerabilities/262567 • CWE-20: Improper Input Validation CWE-400: Uncontrolled Resource Consumption •
CVSS: 5.5EPSS: 0%CPEs: 13EXPL: 0CVE-2022-34165
https://notcve.org/view.php?id=CVE-2022-34165
09 Sep 2022 — IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.9 are vulnerable to HTTP header injection, caused by improper validation. This could allow an attacker to conduct various attacks against the vulnerable system, including cache poisoning and cross-site scripting. IBM X-Force ID: 229429. IBM WebSphere Application Server versiones 7.0, 8.0, 8.5 y 9.0 e IBM WebSphere Application Server Liberty versiones 17.0.0.3 a 22.0.0.9 son vulnerable... • https://exchange.xforce.ibmcloud.com/vulnerabilities/229429 • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') •
CVSS: 8.8EPSS: 0%CPEs: 2EXPL: 0CVE-2022-22476
https://notcve.org/view.php?id=CVE-2022-22476
08 Jul 2022 — IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.7 and Open Liberty are vulnerable to identity spoofing by an authenticated user using a specially crafted request. IBM X-Force ID: 225604. IBM WebSphere Application Server Liberty versiones 17.0.0.3 hasta 22.0.0.7 y Open Liberty son vulnerables a una suplantación de identidad por parte de un usuario autenticado usando una petición especialmente diseñada. IBM X-Force ID: 225604 • https://exchange.xforce.ibmcloud.com/vulnerabilities/225604 • CWE-290: Authentication Bypass by Spoofing •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0CVE-2022-22475
https://notcve.org/view.php?id=CVE-2022-22475
17 May 2022 — IBM WebSphere Application Server Liberty and Open Liberty 17.0.0.3 through 22.0.0.5 are vulnerable to identity spoofing by an authenticated user. IBM X-Force ID: 225603. IBM WebSphere Application Server Liberty y Open Liberty 17.0.0.3 a 22.0.0.5 son vulnerables a la suplantación de identidad por parte de un usuario autenticado. ID de IBM X-Force: 225603 • https://exchange.xforce.ibmcloud.com/vulnerabilities/225603 •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2022-22393
https://notcve.org/view.php?id=CVE-2022-22393
13 May 2022 — IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.5 , with the adminCenter-1.0 feature configured, could allow an authenticated user to issue a request to obtain the status of HTTP/HTTPS ports which are accessible by the application server. IBM X-Force ID: 222078. IBM WebSphere Application Server Liberty versiones 17.0.0.3 hasta 22.0.0.5 , con la funcionalidad adminCenter-1.0 configurada, podría permitir a un usuario autenticado emitir una petición para obtener el estado de los puertos HTTP/H... • https://exchange.xforce.ibmcloud.com/vulnerabilities/222078 •
CVSS: 5.4EPSS: 0%CPEs: 2EXPL: 0CVE-2021-39038
https://notcve.org/view.php?id=CVE-2021-39038
24 Feb 2022 — IBM WebSphere Application Server 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.2 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 213968. IBM WebSphere Application Server versión 9.0 e IBM WebSphere Application Server Liberty versiones 17.0.0.3 ... • https://exchange.xforce.ibmcloud.com/vulnerabilities/213968 • CWE-1021: Improper Restriction of Rendered UI Layers or Frames •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVE-2021-39031
https://notcve.org/view.php?id=CVE-2021-39031
25 Jan 2022 — IBM WebSphere Application Server - Liberty 17.0.0.3 through 22.0.0.1 could allow a remote authenticated attacker to conduct an LDAP injection. By using a specially crafted request, an attacker could exploit this vulnerability and could result in in granting permission to unauthorized resources. IBM X-Force ID: 213875. IBM WebSphere Application Server - Liberty versiones 17.0.0.3 hasta 22.0.0.1 podría permitir a un atacante remoto autenticado conducir una inyección LDAP. Usando una petición especialmente dis... • https://exchange.xforce.ibmcloud.com/vulnerabilities/213875 • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') •
CVSS: 6.5EPSS: 0%CPEs: 9EXPL: 0CVE-2022-22310
https://notcve.org/view.php?id=CVE-2022-22310
19 Jan 2022 — IBM WebSphere Application Server Liberty 21.0.0.10 through 21.0.0.12 could provide weaker than expected security. A remote attacker could exploit this weakness to obtain sensitive information and gain unauthorized access to JAX-WS applications. IBM X-Force ID: 217224. IBM WebSphere Application Server Liberty versiones 21.0.0.10 hasta 21.0.0.12, podría proporcionar una seguridad más débil de lo esperado. Un atacante remoto podría explotar esta debilidad para obtener información confidencial y conseguir acces... • https://exchange.xforce.ibmcloud.com/vulnerabilities/217224 •
CVSS: 5.3EPSS: 0%CPEs: 5EXPL: 0CVE-2021-29842
https://notcve.org/view.php?id=CVE-2021-29842
16 Sep 2021 — IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 21.0.0.9 could allow a remote user to enumerate usernames due to a difference of responses from valid and invalid login attempts. IBM X-Force ID: 205202. IBM WebSphere Application Server versiones 7.0, 8.0, 8.5, 9.0 y Liberty versiones 17.0.0.3 hasta 21.0.0.9, podrían permitir a un usuario remoto enumerar nombres de usuario debido a una diferencia de respuestas de intentos de inicio de sesión válidos y no válidos. IBM X-Force I... • https://exchange.xforce.ibmcloud.com/vulnerabilities/205202 • CWE-307: Improper Restriction of Excessive Authentication Attempts •