IBM WebSphere Application Server vulnerabilities

IBM WebSphere Application Server 8.5, 9.0 and Liberty 17.0.0.3 through 26.0.0.10 could allow a remote attacker to cause a denial of service caused by an insecure deserialization in the messaging service.

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to bypass cryptographic signature verification due to improper verification.

IBM WebSphere Application Server 8.5 and 9.0 could allow an authenticated attacker to bypass authorization leading to administrative impersonation across the cell.

IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to bypass authentication by exploiting a flaw in the CSIv2 inbound propagation handler.

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 Liberty could allow a remote unauthenticated attacker to cause a denial of service due to uncontrolled resource consumption.

IBM WebSphere Application Server versions 7.0, 8.0, 8.5, and 9.0 may create files with default permissions instead of customized ones when custom startup scripts are used. A local attacker could exploit this to gain access to files with an unknown impact.

IBM WebSphere Application Server versions 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site request forgery, which could allow an attacker to execute malicious and unauthorized actions transmitted from a trusted user.

IBM WebSphere Application Server versions 8.0, 8.5, 8.5.5, and 9.0 using OpenID Connect (OIDC) configured with a Trust Association Interceptor (TAI) could allow a user to gain elevated privileges on the system.

IBM WebSphere Application Server may be vulnerable to a denial of service, caused by allowing serialized objects from untrusted sources to run and cause the consumption of resources.

IBM WebSphere Application Server (WAS) versions 7.0 before 7.0.0.43, 8.0 before 8.0.0.13, 8.5 before 8.5.5.11, 9.0 before 9.0.0.2, and Liberty before 16.0.0.4 allows remote authenticated users to execute arbitrary Java code via a crafted serialized object.

IBM WebSphere Application Server (WAS) versions 7.x before 7.0.0.43, 8.0.x before 8.0.0.13, 8.5.x before 8.5.5.11, 9.0.x before 9.0.0.2, and Liberty before 16.0.0.3 mishandles responses, allowing remote attackers to obtain sensitive information via unspecified vectors.

IBM WebSphere Application Server (WAS) versions 6.1 through 6.1.0.47, 7.0 before 7.0.0.39, 8.0 before 8.0.0.11, and 8.5 before 8.5.5.6 allows remote attackers to execute arbitrary code by sending crafted instructions in a management-port session.

IBM WebSphere Application Server (WAS) versions 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.3, when Load Balancer for IPv4 Dispatcher is enabled, allows remote attackers to cause a denial of service (Load Balancer crash) via unspecified vectors.

IBM WebSphere Application Server versions 6.1.0.0 through 6.1.0.47 and 6.0.2.0 through 6.0.2.43 are vulnerable to a denial of service attack that can be executed via crafted TLS traffic.

An SSRF vulnerability in IBM WebSphere Application Server 9.0, 8.5, and Liberty 17.0.0.3-26.0.0.8 occurs when the SIP container feature (sipServlet-1.1) is enabled. An attacker can use the server to send requests to internal resources.

IBM WebSphere Application Server 9.0 and 8.5 traditional is vulnerable to pre-authentication unsafe deserialization, which could allow a remote attacker to bypass authentication or execute arbitrary code.

IBM WebSphere Application Server 9.0 and 8.5 is vulnerable to broken access control/privilege escalation in the administrative console.

IBM WebSphere Application Server 9.0 and 8.5 are affected by a cross-site scripting (XSS) vulnerability in the administrative console help system. This allows an attacker to inject malicious scripts into the help page.

IBM WebSphere Application Server 9.0 and 8.5 is affected by a cross-site scripting vulnerability in the administrative console's integrated help system. This allows an attacker to inject malicious script into the help page.

IBM WebSphere Application Server 9.0 and 8.5 are vulnerable to remote code execution due to deserialization of untrusted data via JAX-WS endpoints with WS-Security.

IBM WebSphere Application Server 9.0 and 8.5 is vulnerable to remote code execution caused by the bypass of security controls.

IBM WebSphere Application Server 9.0 and 8.5 is vulnerable to identity spoofing.

A remote code execution vulnerability in IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty (versions 8.5, 9.0) allows an attacker to execute arbitrary code via a specially crafted request.

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by an HTTP request smuggling vulnerability.

IBM WebSphere Application Server 9.0 and 8.5 is affected by a deserialization vulnerability in the Name Service component.

IBM WebSphere Application Server 8.5 is affected by an HTTP request smuggling vulnerability due to improper handling of Content-Length headers.

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a virtual host bypass vulnerability.

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by an HTTP request smuggling vulnerability.

IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to obtain sensitive information from the administrative console due to missing authorization checks.

IBM WebSphere Application Server 9.0 and 8.5 could allow a remote attacker to obtain sensitive information about the file system through the FileTransfer servlet.

IBM WebSphere Application Server 9.0 and 8.5 is affected by an authentication bypass vulnerability in the SOAP/JMX connector.

IBM WebSphere Application Server 9.0 and 8.5 is affected by a log injection vulnerability through crafted LTPA token cookies. An attacker can manipulate the content of log files.

IBM WebSphere Application Server (versions 9.0 and 8.5) could allow a remote attacker to obtain sensitive information about the file system through the FileTransfer servlet.

IBM WebSphere Application Server (versions 8.5, 9.0, and Liberty) is vulnerable to HTTP request smuggling.

IBM WebSphere Application Server versions 9.0 and 8.5 are affected by an authentication bypass vulnerability when using XD or Intelligent-Management features.

IBM WebSphere Application Server 9.0 and 8.5 is affected by an authorization bypass vulnerability. The flaw allows access to resources without required permissions.

IBM WebSphere Application Server versions 9.0 and 8.5 could allow a remote attacker to inject forged log entries into the server's administrative log.

IBM WebSphere Application Server 9.0 and 8.5 could allow a remote attacker to inject forged log entries into the server's administrative log.

IBM WebSphere Application Server 9.0 and 8.5 could allow a remote attacker to bypass authentication and obtain sensitive information by sending a crafted unauthenticated request.

IBM WebSphere Application Server 9.0 and 8.5 is affected by a reflected cross-site scripting vulnerability.

IBM WebSphere Application Server 9.0 and 8.5 could allow a remote attacker to bypass authentication on an admin console servlet.

IBM WebSphere Application Server 9.0 and 8.5 is affected by blind server-side request forgery when processing SOAP requests.

IBM WebSphere Application Server 9.0 and 8.5 and IBM WebSphere Application Server - Liberty are vulnerable to HTTP request smuggling caused by improper parsing of the HTTP transfer-encoding request header. By sending a specially crafted header, an attacker could poison the web cache, bypass web application firewall protection, and conduct XSS attacks.

IBM WebSphere Application Server 9.0 and 8.5 and IBM WebSphere Application Server - Liberty could allow a remote attacker to conduct phishing attacks using an open redirect attack. By persuading a victim to visit a specially crafted website, an attacker could spoof the displayed URL to redirect a user to a malicious site that appears trusted.

IBM WebSphere Application Server 9.0, 8.5 and Liberty are vulnerable to HTTP request smuggling due to improper parsing of the transfer-encoding header. An attacker can send a crafted header to poison the web cache, bypass WAF, and conduct XSS attacks.

IBM WebSphere Application Server versions 9.0 and 8.5 is vulnerable to server-side request forgery (SSRF) that could allow a remote, unauthenticated attacker to cause the server to send outbound requests to arbitrary endpoints.

IBM WebSphere Application Server 9.0 and 8.5 could allow an authenticated user with a low-privilege administrative role to modify security configuration. This could result in information disclosure or denial of service.

IBM WebSphere Application Server 9.0 and 8.5 is vulnerable to a security bypass due to improper authentication controls. A local attacker could exploit this vulnerability to escalate privileges and gain unauthorized access to protected resources.

IBM WebSphere Application Server 9.0 and 8.5 is vulnerable to a denial of service caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to trigger excessive resource consumption, potentially leading to reduced availability of the affected service.

IBM WebSphere Application Server 9.0 and 8.5 is vulnerable to a denial of service caused by sending a specially-crafted HTTP request to an administrative endpoint. A remote attacker could exploit this vulnerability to cause the server to exhaust filesystem space.