Known vulnerabilities in IBM WebSphere Application Server - page 6

Vendor: IBM Corporation
Software: IBM WebSphere Application Server
Software CPE: cpe:2.3:a:ibm_corporation:ibm_websphere_application_server:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 169
Public exploits: 4
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM WebSphere Application Server IBM WebSphere Application Server is affected by 169 known vulnerabilities: 3 critical, 21 high, 78 medium, 67 low Critical High Medium Low

Vulnerabilities (169)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU68928 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-40750		 CWE-79 Medium
No
No
 - 02.11.2022 SB2022110227
SB2022122304
SB2022122736
and 3 more
#VU68375 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-38712		 CWE-451 Medium
No
No
 - 18.10.2022 SB2022101803
SB2022111011
SB2022122019
and 6 more
#VU67711 - Server-Side Request Forgery (SSRF)
CVE-2022-35282		 CWE-918 Medium
No
No
 PH47385 28.09.2022 SB2022092811
SB2022111018
SB2022122018
and 4 more
#VU67213 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-34336		 CWE-79 Medium
No
No
 8.5.5.23, 9.0.5.14 13.09.2022 SB2022091320
SB2022111013
SB2023011123
and 2 more
#VU65294 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-22477		 CWE-79 Medium
No
No
 - 14.07.2022 SB2022071406
SB2023021327
SB2023073130
#VU63469 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2022-22365		 CWE-300 Medium
No
No
 7.0.0.45 PH44339, 8.0.0.15 PH44339, 8.5.5.21 PH44339, 9.0.5.11 PH44339 20.05.2022 SB2022052004
SB2022072903
#VU62400 - Improper input validation
CVE-2022-21496		 CWE-20 Medium
No
No
 8.5.5.22, 9.0.5.13 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 118 more
#VU62401 - Improper input validation
CVE-2022-21434		 CWE-20 Medium
No
No
 - 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 111 more
#VU62402 - Improper input validation
CVE-2022-21443		 CWE-20 Low
No
No
 - 19.04.2022 SB2022041944
SB2022041945
SB2022042102
and 109 more
#VU60870 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-39038		 CWE-451 Low
No
No
 - 25.02.2022 SB2022022505
SB2022060710
SB2022062008
and 12 more
#VU60739 - Integer overflow
CVE-2022-25315		 CWE-190 High
No
No
 7.0.0.45 PH44271, 8.0.0.15 PH44271, 8.5.5.21 PH44271, 9.0.5.11 PH44271 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 99 more
#VU60737 - Stack-based buffer overflow
CVE-2022-25313		 CWE-121 High
No
No
 7.0.0.45 PH44271, 8.0.0.15 PH44271, 8.5.5.21 PH44271, 9.0.5.11 PH44271 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 64 more
#VU60736 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-25235		 CWE-94 High
No
No
 7.0.0.45 PH44271, 8.0.0.15 PH44271, 8.5.5.21 PH44271, 9.0.5.11 PH44271 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 106 more
#VU60733 - Improper input validation
CVE-2022-25236		 CWE-20 Medium
No
No
 7.0.0.45 PH44271, 8.0.0.15 PH44271, 8.5.5.21 PH44271, 9.0.5.11 PH44271 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 109 more
#VU59727 - Improper input validation
CVE-2022-21299		 CWE-20 Medium
No
No
 8.5.5.22, 9.0.5.13 18.01.2022 SB2022011840
SB2022011841
SB2022011931
and 105 more
#VU59692 - Deserialization of Untrusted Data
CVE-2022-23302		 CWE-502 High
No
No
 - 18.01.2022 SB2022011818
SB2022012640
SB2022012641
and 60 more
#VU57493 - Improper input validation
CVE-2021-35561		 CWE-20 Medium
No
No
 - 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 94 more
#VU55058 - Improper Verification of Cryptographic Signature
CVE-2021-2369		 CWE-347 Low
No
No
 - 20.07.2021 SB2021072054
SB2021072055
SB2021072201
and 76 more
#VU52449 - Improper input validation
CVE-2021-2163		 CWE-20 Medium
No
No
 8.5.5.23 21.04.2021 SB2021042115
SB2021042116
SB2021042117
and 99 more
#VU30113 - Improper input validation
CVE-2020-5258		 CWE-20 Low
No
No
 - 16.07.2020 SB2020071699
SB2021072124
SB2021072134
and 17 more


Showing elements 101 - 120 out of 169