Known vulnerabilities in IBM WebSphere Application Server - page 7

Vendor: IBM Corporation
Software: IBM WebSphere Application Server
Software CPE: cpe:2.3:a:ibm_corporation:ibm_websphere_application_server:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 169
Public exploits: 4
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM WebSphere Application Server IBM WebSphere Application Server is affected by 169 known vulnerabilities: 3 critical, 21 high, 78 medium, 67 low Critical High Medium Low

Vulnerabilities (169)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU98732 - Exposure of sensitive information to an unauthorized actor
CVE-2019-4505		 CWE-200 Medium
No
No
 - 16.10.2024 SB2019051139
SB2024101657
#VU81994 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-4030		 CWE-79 Medium
No
No
 - 13.10.2023 SB2019021927
SB2019051133
SB2023111533
#VU59693 - Deserialization of Untrusted Data
CVE-2020-9493		 CWE-502 High
No
No
 - 18.01.2022 SB2021061626
SB2022011819
SB2022012640
and 62 more
#VU59691 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-23305		 CWE-89 Medium
No
No
 - 18.01.2022 SB2022011818
SB2022012640
SB2022012641
and 94 more
#VU59281 - Resource exhaustion
CVE-2021-38951		 CWE-400 High
No
No
 - 06.01.2022 SB2022010631
SB2022010632
SB2022021421
and 2 more
#VU59098 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44832		 CWE-94 Medium
No
No
 - 28.12.2021 SB2021122816
SB2021123002
SB2022010601
and 197 more
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-45105		 CWE-835 Medium
Available
No
 - 18.12.2021 SB2021121802
SB2021121903
SB2021122011
and 169 more
#VU58816 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44228		 CWE-94 Critical
Available
Exploited
 8.5.5.21, 9.0.5.11 10.12.2021 SB2021121003
SB2021121101
SB2021121201
and 338 more
#VU57490 - Improper input validation
CVE-2021-35564		 CWE-20 Medium
No
No
 8.5.5.11, 8.5.5.21 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 86 more
#VU57495 - Improper input validation
CVE-2021-35578		 CWE-20 Medium
No
No
 8.5.5.11, 8.5.5.21 19.10.2021 SB2021101939
SB2021101940
SB2021102101
and 95 more
#VU56660 - Exposure of sensitive information to an unauthorized actor
CVE-2021-29842		 CWE-200 Low
No
No
 7.0.0.45 PH38929, 8.0.0.15 PH38929, 8.5.5.20 PH38929, 9.0.5.9 PH38929 16.09.2021 SB2021091613
SB2021122802
SB2021123007
and 8 more
#VU53616 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-20492		 CWE-611 Medium
No
No
 8.0.0.15, 9.0.5.8 27.05.2021 SB2021052715
SB2022012444
SB2022042567
and 4 more
#VU52053 - Server-Side Request Forgery (SSRF)
CVE-2021-20480		 CWE-918 Medium
No
No
 7.0.0.45-WS-WAS-IFPH33994, 8.0.0.15-WS-WAS-IFPH33994, 8.5.5.20 12.04.2021 SB2021041218
SB2023092037
SB2024110142
#VU50683 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-20353		 CWE-611 Medium
No
No
 8.5.5.20, 9.0.5.7 15.02.2021 SB2021021504
SB2025012306
#VU46686 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-4578		 CWE-79 Low
No
No
 7.0.0.45, 8.0.0.15, 8.5.5.18, 9.0.5.6 14.09.2020 SB2020091420
SB2022021422
#VU45825 - Deserialization of Untrusted Data
CVE-2020-4589		 CWE-502 High
No
No
 - 20.08.2020 SB2020082022
#VU24938 - Command injection
CVE-2020-4163		 CWE-77 Medium
No
No
 8.5.5.17, 9.0.5.3 05.02.2020 SB2020020508
SB2020092114
#VU16531 - Permissions, Privileges, and Access Controls
CVE-2018-1904		 CWE-264 High
No
No
 8.5.5.15, 9.0.0.10 10.12.2018 SB2018121310
SB2023011827
#VU16175 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-1905		 CWE-611 Low
No
No
 9.0.0.10 20.11.2018 SB2018112908
#VU15918 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2018-1797		 CWE-22 Low
No
No
 8.5.5.15, 9.0.0.10 15.11.2018 SB2018111601
SB2023011823


Showing elements 121 - 140 out of 169