Known vulnerabilities in IBM WebSphere Application Server - page 4

Vendor: IBM Corporation
Software: IBM WebSphere Application Server
Software CPE: cpe:2.3:a:ibm_corporation:ibm_websphere_application_server:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 169
Public exploits: 4
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM WebSphere Application Server IBM WebSphere Application Server is affected by 169 known vulnerabilities: 3 critical, 21 high, 78 medium, 67 low Critical High Medium Low

Vulnerabilities (169)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU95625 - Improper input validation
CVE-2024-35154		 CWE-20 Low
No
No
 8.5.5.26, 9.0.5.21 09.08.2024 SB2024080941
SB2024081324
SB2024081439
and 11 more
#VU94637 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-37532		 CWE-451 Medium
No
No
 8.5.5.26, 9.0.5.21 22.07.2024 SB2024072221
SB2024072222
SB2024072306
and 14 more
#VU93396 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-35153		 CWE-79 Medium
No
No
 8.5.5.26, 9.0.5.21 26.06.2024 SB2024062690
SB2024062708
SB2024062717
and 12 more
#VU89343 - Resource exhaustion
CVE-2023-38264		 CWE-400 Medium
No
No
 8.5.5.26 10.05.2024 SB2024051027
SB2024051417
SB2024052007
and 70 more
#VU88977 - Resource exhaustion
CVE-2024-25026		 CWE-400 Medium
No
No
 8.5.5.26, 9.0.5.20 24.04.2024 SB2024042458
SB2024042525
SB2024042626
and 68 more
#VU88803 - Server-Side Request Forgery (SSRF)
CVE-2024-22329		 CWE-918 Medium
No
No
 8.5.5.26, 9.0.5.20 18.04.2024 SB2024041812
SB2024042613
SB2024043016
and 67 more
#VU88802 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-22354		 CWE-611 High
No
No
 8.5.5.26, 9.0.5.20 18.04.2024 SB2024041812
SB2024042628
SB2024050920
and 66 more
#VU88666 - Improper input validation
CVE-2024-21011		 CWE-20 Low
No
No
 8.5.5.26 17.04.2024 SB2024041764
SB2024041765
SB2024041766
and 132 more
#VU88173 - Resource exhaustion
CVE-2023-51775		 CWE-400 Medium
No
No
 8.5.5.26, 9.0.5.20 05.04.2024 SB2024040525
SB2024041129
SB2024041130
and 83 more
#VU88120 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2023-50313		 CWE-327 Low
No
No
 - 04.04.2024 SB2024040414
SB2024040415
SB2024040439
and 16 more
#VU85468 - Improper input validation
CVE-2024-20918		 CWE-20 Medium
No
No
 8.5.5.26 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 192 more
#VU85469 - Improper input validation
CVE-2024-20952		 CWE-20 Medium
No
No
 8.5.5.26 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 189 more
#VU85471 - Improper input validation
CVE-2024-20921		 CWE-20 Medium
No
No
 8.5.5.26 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 185 more
#VU85473 - Improper input validation
CVE-2024-20945		 CWE-20 Low
No
No
 8.5.5.26 16.01.2024 SB2024011689
SB2024011690
SB2024011691
and 177 more
#VU83267 - Improper input validation
CVE-2023-5676		 CWE-20 Low
No
No
 8.5.5.25 20.11.2023 SB2023112010
SB2023112011
SB2023112726
and 101 more
#VU82583 - Observable discrepancy
CVE-2023-33850		 CWE-203 Medium
No
No
 8.5.5.26 31.10.2023 SB2023103131
SB2023111305
SB2023111407
and 106 more
#VU82140 - Improper input validation
CVE-2023-22067		 CWE-20 Medium
No
No
 8.5.5.25 17.10.2023 SB2023101797
SB2023101924
SB2023101990
and 117 more
#VU82141 - Improper input validation
CVE-2023-22081		 CWE-20 Medium
No
No
 8.5.5.25 17.10.2023 SB2023101797
SB2023101798
SB2023101905
and 187 more
#VU78413 - Improper input validation
CVE-2023-22045		 CWE-20 Low
No
No
 8.5.5.25 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 155 more
#VU78414 - Improper input validation
CVE-2023-22049		 CWE-20 Low
No
No
 8.5.5.25 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 164 more


Showing elements 61 - 80 out of 169