Known vulnerabilities in Enterprise Application Service for Java

Vendor: IBM Corporation
Software: Enterprise Application Service for Java
Software CPE: cpe:2.3:a:ibm_corporation:enterprise_application_service_for_java:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 6.9

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Enterprise Application Service for Java Enterprise Application Service for Java is affected by 3 known vulnerabilities: 3 medium Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU119901 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-12635		 CWE-79 Medium
No
No
 - 12.12.2025 SB2025121283
SB2025121517
SB2025121518
and 42 more
#VU114346 - Command injection
CVE-2025-7962		 CWE-77 Medium
No
No
 - 21.08.2025 SB2025082145
SB2025082146
SB2025082147
and 54 more
#VU83992 - Use of Insufficiently Random Values
CVE-2020-36732		 CWE-330 Medium
No
No
 - 08.12.2023 SB2023120804
SB2024030742
SB2025091116
and 26 more