Known vulnerabilities in IBM WebSphere Application Server - page 9

Software CPE: cpe:2.3:a:ibm_corporation:ibm_websphere_application_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 169
Public exploits: 4
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM WebSphere Application Server IBM WebSphere Application Server is affected by 169 known vulnerabilities: 3 critical, 21 high, 78 medium, 67 low Critical High Medium Low

Vulnerabilities (169)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU85878 - Memory corruption
CVE-2016-0385
CWE-119 Low
No
No
7.0.0.43, 8.0.0.13, 8.5.5.10, 9.0.0.1 29.01.2024 SB2016090105
#VU7605 - Exposure of sensitive information to an unauthorized actor
CVE-2017-1382
CWE-200 Low
No
No
- 31.07.2017 SB2017073105
#VU7604 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-1380
CWE-79 Low
No
No
- 31.07.2017 SB2017073105
#VU6529 - Exposure of sensitive information to an unauthorized actor
CVE-2017-1137
CWE-200 Low
No
No
- 12.05.2017 SB2017051205
#VU6396 - Cross-Site Request Forgery (CSRF)
CVE-2017-1194
CWE-352 Medium
No
No
- 01.05.2017 SB2017050102
#VU5823 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-1121
CWE-79 Low
No
No
- 13.02.2017 SB2017021404
#VU705 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-3042
CWE-79 Low
No
No
- 01.10.2016 SB2016100102
#VU531 - Exposure of sensitive information to an unauthorized actor
CVE-2016-5986
CWE-200 Low
No
No
- 19.09.2016 SB2016091911
SB2017050833
#VU326 - Cross-Site Request Forgery (CSRF)
CVE-2016-0377
CWE-352 Low
No
No
- 18.08.2016 SB2016081805


Showing elements 161 - 180 out of 169