Known vulnerabilities in IBM WebSphere Application Server - page 3

Vendor: IBM Corporation
Software: IBM WebSphere Application Server
Software CPE: cpe:2.3:a:ibm_corporation:ibm_websphere_application_server:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 169
Public exploits: 4
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM WebSphere Application Server IBM WebSphere Application Server is affected by 169 known vulnerabilities: 3 critical, 21 high, 78 medium, 67 low Critical High Medium Low

Vulnerabilities (169)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU113074 - Stack-based buffer overflow
CVE-2025-36097		 CWE-121 High
No
No
 9.0.5.25 18.07.2025 SB20250718100
SB2025072128
SB2025072307
and 43 more
#VU111988 - Deserialization of Untrusted Data
CVE-2025-36038		 CWE-502 Critical
No
No
 8.5.5.28, 9.0.5.25 27.06.2025 SB2025062708
SB2025063083
SB2025070944
and 14 more
#VU109860 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-33104		 CWE-79 Low
No
No
 - 27.05.2025 SB2025052752
SB2025052753
SB2025052908
and 6 more
#VU107856 - Server-Side Request Forgery (SSRF)
CVE-2025-27907		 CWE-918 Medium
No
No
 - 23.04.2025 SB2025042309
SB2025042318
SB2025042345
and 11 more
#VU100521 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45087		 CWE-79 Medium
No
No
 8.5.5.27, 9.0.5.22 15.11.2024 SB2024111525
SB2024112217
SB2024112515
and 6 more
#VU99760 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-45086		 CWE-611 Medium
No
No
 8.5.5.27, 9.0.5.22 05.11.2024 SB2024110544
SB2024110623
SB2024110629
and 8 more
#VU99601 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-5016		 CWE-22 Low
No
No
 - 01.11.2024 SB2024110141
SB2024110142
SB2025012306
#VU99600 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-20354		 CWE-22 Medium
No
No
 - 01.11.2024 SB2024110140
SB2024110142
SB2025012306
#VU99598 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-4949		 CWE-611 High
No
No
 - 01.11.2024 SB2024110137
SB2024110142
SB2025012306
#VU99280 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45071		 CWE-79 Low
No
No
 8.5.5.27, 9.0.5.22 23.10.2024 SB2024102327
SB2024102343
SB2024102353
and 11 more
#VU98810 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-45072		 CWE-611 Medium
No
No
 8.5.5.27 18.10.2024 SB2024101807
SB2024101813
SB20241022399
and 11 more
#VU98730 - Improper input validation
CVE-2024-45085		 CWE-20 Medium
No
No
 8.5.5.27 16.10.2024 SB2024101654
SB2024101816
SB2024101820
and 8 more
#VU98644 - Improper input validation
CVE-2024-21235		 CWE-20 Medium
No
No
 8.5.5.27 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 129 more
#VU98136 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45073		 CWE-79 Low
No
No
 - 08.10.2024 SB2024100833
SB2024100834
SB2024100942
and 12 more
#VU97226 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-27267		 CWE-362 Medium
No
No
 8.5.5.27 12.09.2024 SB2024091291
SB2024091292
SB2024091618
and 57 more
#VU96059 - Exposure of sensitive information to an unauthorized actor
CVE-2023-50315		 CWE-200 Low
No
No
 - 15.08.2024 SB2024081567
SB2024082831
SB2024082846
and 9 more
#VU94555 - Improper input validation
CVE-2024-21147		 CWE-20 Medium
No
No
 8.5.5.27 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 123 more
#VU94557 - Improper input validation
CVE-2024-21140		 CWE-20 Medium
No
No
 8.5.5.27 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 119 more
#VU94558 - Improper input validation
CVE-2024-21144		 CWE-20 Low
No
No
 8.5.5.27 18.07.2024 SB20240718154
SB20240718155
SB20240718192
and 114 more
#VU89914 - Deserialization of Untrusted Data
CVE-2015-7450		 CWE-502 High
Available
Exploited
 9.0.5.2 30.05.2024 SB2016050815
SB2025022817


Showing elements 41 - 60 out of 169