CVE-2017-1380

🗓️ 24 Jul 2017 21:00:00Reported by ibmType

IBM WebSphere App Server vulnerable to XSS, leading to credential disclosure

Reporter	Title	Published	Views	Family All 49
IBM Security Bulletins	Multiple vulnerabilities have been identified in WebSphere Application Server shipped with WebSphere Service Registry and Repository (CVE-2017-1380, CVE-2017-1381, CVE-2017-1382, CVE-2017-1501)	15 Jun 201807:07	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Tivoli Netcool Impact (CVE-2017-1380)	17 Jun 201815:46	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Case Manager (CVE-2017-1380)	17 Jun 201812:18	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Cloud Orchestrator and Cloud Orchestrator Enterprise (CVE-2017-1380)	17 Jun 201822:33	–	ibm
IBM Security Bulletins	Security Bulletins for Emptoris Program Management	8 Dec 201816:15	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in WebSphere Application Server shipped with Financial Transaction Manager (CVE-2017-1380)	16 Jun 201820:12	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Business Process Manager, WebSphere Process Server, WebSphere Enterprise Service Bus, and WebSphere Lombardi Edition (CVE-2017-1380)	15 Jun 201807:07	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities affect IBM WebSphere Application Server for Bluemix	15 Jun 201807:08	–	ibm
IBM Security Bulletins	Security Bulletin: Cross-site scripting vulnerability in Admin Console for WebSphere Application Server (CVE-2017-1380) may affect IBM Tivoli Netcool Configuration Manager (ITNCM)	17 Jun 201815:44	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Tivoli Federated Identity Manager and IBM Tivoli Federated Identity Manager Business Gateway (CVE-2017-1380)	16 Jun 201822:01	–	ibm

NVD

Vulners

Node

ibm websphere_application_serverRange7.0.0.0–7.0.0.43

ibm websphere_application_serverRange8.0.0.0–8.0.0.13

ibm websphere_application_serverRange8.5.0.0–8.5.5.11

ibm websphere_application_serverRange9.0.0.0–9.0.0.4

[
  {
    "product": "WebSphere Application Server",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "7.0"
      },
      {
        "status": "affected",
        "version": "8.0"
      },
      {
        "status": "affected",
        "version": "8.5"
      },
      {
        "status": "affected",
        "version": "9.0"
      }
    ]
  }
]

Source	Link
securitytracker	www.securitytracker.com/id/1038978
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/127151
securityfocus	www.securityfocus.com/bid/99961
ibm	www.ibm.com/support/docview.wss

13 May 2026 00:24Current

5.3Medium risk

Vulners AI Score5.3

CVSS 23.5

CVSS 35.4

EPSS0.00403

CWE-79