Known vulnerabilities in IBM WebSphere Application Server 8.0.0.15-WS-WAS-IFPH33994

Vendor: IBM Corporation
Software: IBM WebSphere Application Server
Version: 8.0.0.15-WS-WAS-IFPH33994
Software CPE: cpe:2.3:a:ibm_corporation:ibm_websphere_application_server:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 15
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting IBM WebSphere Application Server version 8.0.0.15-WS-WAS-IFPH33994 IBM WebSphere Application Server 8.0.0.15-WS-WAS-IFPH33994 is affected by 15 vulnerabilities: 1 critical, 6 high, 7 medium, 1 low Critical High Medium Low

Vulnerabilities (15)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU69209 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-34165		 CWE-444 Medium
No
No
 - 10.11.2022 SB2022111029
SB2022111104
SB2022111409
and 58 more
#VU68375 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-38712		 CWE-451 Medium
No
No
 - 18.10.2022 SB2022101803
SB2022111011
SB2022122019
and 6 more
#VU67711 - Server-Side Request Forgery (SSRF)
CVE-2022-35282		 CWE-918 Medium
No
No
 PH47385 28.09.2022 SB2022092811
SB2022111018
SB2022122018
and 4 more
#VU67213 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-34336		 CWE-79 Medium
No
No
 8.5.5.23, 9.0.5.14 13.09.2022 SB2022091320
SB2022111013
SB2023011123
and 2 more
#VU63469 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2022-22365		 CWE-300 Medium
No
No
 7.0.0.45 PH44339, 8.0.0.15 PH44339, 8.5.5.21 PH44339, 9.0.5.11 PH44339 20.05.2022 SB2022052004
SB2022072903
#VU60739 - Integer overflow
CVE-2022-25315		 CWE-190 High
No
No
 7.0.0.45 PH44271, 8.0.0.15 PH44271, 8.5.5.21 PH44271, 9.0.5.11 PH44271 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 99 more
#VU60737 - Stack-based buffer overflow
CVE-2022-25313		 CWE-121 High
No
No
 7.0.0.45 PH44271, 8.0.0.15 PH44271, 8.5.5.21 PH44271, 9.0.5.11 PH44271 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 64 more
#VU60736 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-25235		 CWE-94 High
No
No
 7.0.0.45 PH44271, 8.0.0.15 PH44271, 8.5.5.21 PH44271, 9.0.5.11 PH44271 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 106 more
#VU60733 - Improper input validation
CVE-2022-25236		 CWE-20 Medium
No
No
 7.0.0.45 PH44271, 8.0.0.15 PH44271, 8.5.5.21 PH44271, 9.0.5.11 PH44271 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 109 more
#VU59693 - Deserialization of Untrusted Data
CVE-2020-9493		 CWE-502 High
No
No
 - 18.01.2022 SB2021061626
SB2022011819
SB2022012640
and 62 more
#VU59692 - Deserialization of Untrusted Data
CVE-2022-23302		 CWE-502 High
No
No
 - 18.01.2022 SB2022011818
SB2022012640
SB2022012641
and 60 more
#VU59691 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-23305		 CWE-89 Medium
No
No
 - 18.01.2022 SB2022011818
SB2022012640
SB2022012641
and 94 more
#VU59281 - Resource exhaustion
CVE-2021-38951		 CWE-400 High
No
No
 - 06.01.2022 SB2022010631
SB2022010632
SB2022021421
and 2 more
#VU58816 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44228		 CWE-94 Critical
Public exploit available
Exploited
 8.5.5.21, 9.0.5.11 10.12.2021 SB2021121003
SB2021121101
SB2021121201
and 338 more
#VU56660 - Exposure of sensitive information to an unauthorized actor
CVE-2021-29842		 CWE-200 Low
No
No
 7.0.0.45 PH38929, 8.0.0.15 PH38929, 8.5.5.20 PH38929, 9.0.5.9 PH38929 16.09.2021 SB2021091613
SB2021122802
SB2021123007
and 8 more