Known vulnerabilities in IBM WebSphere Application Server 8.0.0.15 PH44271

Version: 8.0.0.15 PH44271
Software CPE: cpe:2.3:a:ibm_corporation:ibm_websphere_application_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 5
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 6.9

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM WebSphere Application Server version 8.0.0.15 PH44271 IBM WebSphere Application Server 8.0.0.15 PH44271 is affected by 5 vulnerabilities: 5 medium Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU69209 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-34165
CWE-444 Medium
No
No
- 10.11.2022 SB2022111029
SB2022111104
SB2022111409
and 58 more
#VU68375 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-38712
CWE-451 Medium
No
No
- 18.10.2022 SB2022101803
SB2022111011
SB2022122019
and 6 more
#VU67711 - Server-Side Request Forgery (SSRF)
CVE-2022-35282
CWE-918 Medium
No
No
PH47385 28.09.2022 SB2022092811
SB2022111018
SB2022122018
and 4 more
#VU67213 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-34336
CWE-79 Medium
No
No
8.5.5.23, 9.0.5.14 13.09.2022 SB2022091320
SB2022111013
SB2023011123
and 2 more
#VU63469 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2022-22365
CWE-300 Medium
No
No
7.0.0.45 PH44339, 8.0.0.15 PH44339, 8.5.5.21 PH44339, 9.0.5.11 PH44339 20.05.2022 SB2022052004
SB2022072903