IBM WebSphere Application Server vulnerabilities

IBM WebSphere Application Server versions 7.0, 8.0, 8.5, and 9.0 may create files with default permissions instead of customized ones when custom startup scripts are used. A local attacker could exploit this to gain access to files with an unknown impact.

IBM WebSphere Application Server versions 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site request forgery, which could allow an attacker to execute malicious and unauthorized actions transmitted from a trusted user.

IBM WebSphere Application Server versions 8.0, 8.5, 8.5.5, and 9.0 using OpenID Connect (OIDC) configured with a Trust Association Interceptor (TAI) could allow a user to gain elevated privileges on the system.

IBM WebSphere Application Server may be vulnerable to a denial of service, caused by allowing serialized objects from untrusted sources to run and cause the consumption of resources.

IBM WebSphere Application Server (WAS) versions 7.0 before 7.0.0.43, 8.0 before 8.0.0.13, 8.5 before 8.5.5.11, 9.0 before 9.0.0.2, and Liberty before 16.0.0.4 allows remote authenticated users to execute arbitrary Java code via a crafted serialized object.

IBM WebSphere Application Server (WAS) versions 7.x before 7.0.0.43, 8.0.x before 8.0.0.13, 8.5.x before 8.5.5.11, 9.0.x before 9.0.0.2, and Liberty before 16.0.0.3 mishandles responses, allowing remote attackers to obtain sensitive information via unspecified vectors.

IBM WebSphere Application Server (WAS) versions 6.1 through 6.1.0.47, 7.0 before 7.0.0.39, 8.0 before 8.0.0.11, and 8.5 before 8.5.5.6 allows remote attackers to execute arbitrary code by sending crafted instructions in a management-port session.

IBM WebSphere Application Server (WAS) versions 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.3, when Load Balancer for IPv4 Dispatcher is enabled, allows remote attackers to cause a denial of service (Load Balancer crash) via unspecified vectors.

IBM WebSphere Application Server versions 6.1.0.0 through 6.1.0.47 and 6.0.2.0 through 6.0.2.43 are vulnerable to a denial of service attack that can be executed via crafted TLS traffic.

An SSRF vulnerability in IBM WebSphere Application Server 9.0, 8.5, and Liberty 17.0.0.3-26.0.0.8 occurs when the SIP container feature (sipServlet-1.1) is enabled. An attacker can use the server to send requests to internal resources.

IBM WebSphere Application Server 9.0 and 8.5 traditional is vulnerable to pre-authentication unsafe deserialization, which could allow a remote attacker to bypass authentication or execute arbitrary code.

IBM WebSphere Application Server 9.0 and 8.5 is vulnerable to broken access control/privilege escalation in the administrative console.

IBM WebSphere Application Server 9.0 and 8.5 are affected by a cross-site scripting (XSS) vulnerability in the administrative console help system. This allows an attacker to inject malicious scripts into the help page.

IBM WebSphere Application Server 9.0 and 8.5 is affected by a cross-site scripting vulnerability in the administrative console's integrated help system. This allows an attacker to inject malicious script into the help page.

IBM WebSphere Application Server 9.0 and 8.5 are vulnerable to remote code execution due to deserialization of untrusted data via JAX-WS endpoints with WS-Security.

IBM WebSphere Application Server 9.0 and 8.5 is vulnerable to remote code execution caused by the bypass of security controls.

IBM WebSphere Application Server 9.0 and 8.5 is vulnerable to identity spoofing.

A remote code execution vulnerability in IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty (versions 8.5, 9.0) allows an attacker to execute arbitrary code via a specially crafted request.

IBM WebSphere Application Server 8.5 and 9.0 and IBM WebSphere Application Server - Liberty Continuous delivery have a flaw in the ORB component in IBM SDK, Java Technology Edition, which may allow a malicious IIOP server to induce loading and instantiation of arbitrary classes.

IBM WebSphere Application Server 9.0 and 8.5 contain a remote code execution vulnerability in the SOAP/JMX connector. An attacker can exploit this flaw to execute arbitrary code on the server.

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 are vulnerable to a denial of service via a crafted HTTP request.

A vulnerability in IBM WebSphere Application Server 8.5 and 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.7 could allow a remote attacker to bypass security constraints.

IBM WebSphere Application Server versions 9.0, 8.5, and Liberty 17.0.0.3 through 26.0.0.7 are vulnerable to HTTP request smuggling.

IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty is vulnerable to HTTP request smuggling due to improper handling of TRACE requests.

IBM WebSphere Application Server 9.0, 8.5 and Liberty versions 17.0.0.3 through 26.0.0.7 are vulnerable to HTTP Response Smuggling due to improper handling of non-standard HTTP version tokens.

IBM WebSphere Application Server 9.0, 8.5 and Liberty versions 17.0.0.3 through 26.0.0.7 are affected by a denial of service vulnerability in the HTTP channel due to unbounded allocation of resources without limits.

IBM WebSphere Application Server 8.5 and 9.0 traditional could allow a remote attacker to execute arbitrary code caused by unsafe deserialization of untrusted data.

IBM WebSphere Application Server 9.0 and 8.5 traditional could allow a remote attacker to obtain sensitive information.

IBM WebSphere Application Server 8.5 and 9.0 traditional could allow a remote attacker to conduct a cross-site scripting attack.

IBM WebSphere Application Server versions 9.0 and 8.5 could allow a remote attacker to bypass authentication by sending a crafted unauthenticated request.

IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources.

IBM WebSphere Application Server 9.0 and 8.5 is affected by a cross-site scripting vulnerability in the administrative console. This allows an attacker to inject malicious scripts into the server management interface.

IBM WebSphere Application Server 9.0 and 8.5 contain a vulnerability that could allow a remote attacker to obtain sensitive information from the integrated help system of the administrative console.

IBM WebSphere Application Server and IBM WebSphere Application Server Liberty are vulnerable to a denial of service (DoS) attack in the WebSphere WebServer Plug-in component. An attacker can send crafted requests to the web server, causing system overload.

IBM WebSphere Application Server and IBM WebSphere Application Server Liberty, when using Intelligent Management with the WebSphere WebServer Plug-in component, are vulnerable to remote code execution and denial of service. This vulnerability can be exploited when an attacker impersonates backend servers and sends crafted responses to the plug-in.

IBM WebSphere Application Server versions 9.0 and 8.5 are vulnerable to server-side request forgery (SSRF) with the Ajax Proxy configured. This may allow an attacker to send unauthorized requests from the system, resulting in a security bypass or information disclosure.

IBM WebSphere Application Server and Liberty are vulnerable to remote code execution and denial of service in the WebSphere Web Server Plug-in component. This vulnerability can be exploited when an attacker impersonates the application server and sends crafted responses to the plug-in.

IBM WebSphere Application Server 9.0 and 8.5 is affected by improper validation of user-supplied data during deserialization using the SAML Web Single Sign-On component. This could result in remote code execution via a crafted HTTP request when combined with a suitable gadget chain.

IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty are vulnerable to HTTP request smuggling. An attacker can send a specially crafted request that is misinterpreted by the server.