Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2024-19021
HistoryApr 17, 2024 - 12:00 a.m.

IBM WebSphere Application Server and IBM WebSphere Application Server Liberty Server-Side Request Forgery Vulnerability

2024-04-1700:00:00
China National Vulnerability Database
www.cnvd.org.cn
10
ibm
websphere
ssrf
vulnerability
javaee
open liberty
attack

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

IBM WebSphere Application Server (WAS) and IBM WebSphere Application Server Liberty are both products of International Business Machines (IBM).IBM WebSphere Application Server is an application server IBM WebSphere Application Server is an application server product. The product is a platform for JavaEE and Web services applications and is the foundation of the IBM WebSphere software platform.IBM WebSphere Application Server Liberty is a Java application server built on top of the Open Liberty project. A server-side request forgery vulnerability exists in IBM WebSphere Application Server and IBM WebSphere Application Server Liberty, which can be exploited by an attacker to conduct SSRF attacks by sending specially crafted requests.

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for CNVD-2024-19021