Known vulnerabilities in IBM WebSphere Application Server - page 5

Vendor: IBM Corporation
Software: IBM WebSphere Application Server
Software CPE: cpe:2.3:a:ibm_corporation:ibm_websphere_application_server:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 169
Public exploits: 4
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM WebSphere Application Server IBM WebSphere Application Server is affected by 169 known vulnerabilities: 3 critical, 21 high, 78 medium, 67 low Critical High Medium Low

Vulnerabilities (169)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU78901 - Deserialization of Untrusted Data
CVE-2022-40609		 CWE-502 High
No
No
 8.5.5.24 03.08.2023 SB2023080307
SB2023080808
SB2023080809
and 56 more
#VU77813 - Configuration
CVE-2023-35890		 CWE-16 Medium
No
No
 - 29.06.2023 SB2023062941
SB2023072560
SB2023090115
and 3 more
#VU76022 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-27554		 CWE-611 Medium
No
No
 - 11.05.2023 SB2023051112
SB2023051523
SB2023051524
and 5 more
#VU75686 - Improper Validation of Certificate with Host Mismatch
CVE-2022-39161		 CWE-297 Low
No
No
 - 03.05.2023 SB2023050303
SB2023050304
SB2023063008
and 7 more
#VU75531 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-24966		 CWE-79 Medium
No
No
 - 26.04.2023 SB2023042654
SB2023042747
SB2023042858
and 6 more
#VU75265 - Improper input validation
CVE-2023-21938		 CWE-20 Low
No
No
 8.5.5.24 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 181 more
#VU75266 - Improper input validation
CVE-2023-21968		 CWE-20 Low
No
No
 8.5.5.24 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 179 more
#VU75267 - Improper input validation
CVE-2023-21937		 CWE-20 Low
No
No
 8.5.5.24 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 184 more
#VU75260 - Improper input validation
CVE-2023-21930		 CWE-20 Medium
No
No
 8.5.5.24 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 191 more
#VU75261 - Improper input validation
CVE-2023-21967		 CWE-20 Medium
No
No
 8.5.5.24 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 189 more
#VU75262 - Improper input validation
CVE-2023-21954		 CWE-20 Medium
No
No
 8.5.5.24 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 166 more
#VU73904 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-26283		 CWE-79 Medium
No
No
 - 21.03.2023 SB2023032154
SB2023042750
SB2023062138
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998		 CWE-770 Medium
Available
No
 8.5.5.24, 9.0.5.16 20.02.2023 SB2023022046
SB2023022047
SB2023030917
and 202 more
#VU71715 - Deserialization of Untrusted Data
CVE-2023-23477		 CWE-502 Critical
No
No
 8.5.5.20, 9.0.5.8 31.01.2023 SB2023013137
SB2023020111
SB2023020114
and 9 more
#VU71483 - Inadequate Encryption Strength
CVE-2022-43917		 CWE-326 Medium
No
No
 - 24.01.2023 SB2023012448
#VU71288 - Improper input validation
CVE-2023-21830		 CWE-20 Medium
No
No
 8.5.5.24 17.01.2023 SB2023011784
SB2023011785
SB2023012377
and 112 more
#VU69209 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-34165		 CWE-444 Medium
No
No
 - 10.11.2022 SB2022111029
SB2022111104
SB2022111409
and 58 more
#VU68438 - Improper input validation
CVE-2022-21626		 CWE-20 Medium
No
No
 - 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 157 more
#VU68441 - Improper input validation
CVE-2022-21624		 CWE-20 Low
No
No
 - 18.10.2022 SB2022101901
SB2022101902
SB2022102012
and 142 more
#VU62399 - Improper input validation
CVE-2022-21426		 CWE-20 Medium
No
No
 8.5.5.24 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 129 more


Showing elements 81 - 100 out of 169