Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-20087
HistoryMar 05, 2023 - 12:00 a.m.

IBM WebSphere Application Server Input Validation Error Vulnerability (CNVD-2023-20087)

2023-03-0500:00:00
China National Vulnerability Database
www.cnvd.org.cn
11
ibm
websphere
application server
input validation
vulnerability
http server
denial of service
remote attackers
error messages

0.001 Low

EPSS

Percentile

45.6%

IBM WebSphere Application Server (WAS) is an application server product from International Business Machines (IBM). The product is a platform for JavaEE and Web services applications and is the foundation of the IBM WebSphere software platform. IBM WebSphere Application Server HTTP Server version 8.5 has an input validation error vulnerability that stems from failure to properly handle incoming error messages, which can be exploited by remote attackers The vulnerability causes a denial of service through the use of specially crafted URLs.

0.001 Low

EPSS

Percentile

45.6%

Related for CNVD-2023-20087