CVE-2018-1643

🗓️ 15 Nov 2018 16:00:00Reported by ibmType

IBM WebSphere App Server 7.0/8.0/8.5/9.0 CVE-2018-1643 - XSS Vulnerabilit

Reporter	Title	Published	Views	Family All 33
IBM Security Bulletins	Security Bulletin: Content Collector for Email is affected by 3RD PARTY WebSphere XSS	6 Feb 201912:20	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Tivoli Netcool/OMNIbus WebGUI (CVE-2018-1643)	30 Nov 201803:50	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager (CVE-2018-1643)	17 Jan 202317:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM Websphere Application Server shipped with IBM Security Directory Server (CVE-2018-1643, CVE-2018-1719)	25 Jan 201916:35	–	ibm
IBM Security Bulletins	Security Bulletin: A Security Vulnerability in Websphere Application Server Affects Predictive Customer Intelligence (CVE-2018-1643)	11 Feb 202021:31	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security vulnerabilities have been identified in IBM WebSphere Application Server shipped with Tivoli Access Manager for e-business	29 Jan 201921:45	–	ibm
IBM Security Bulletins	Security Bulletin: WebSphere Application Server is shipped with WebSphere Remote Server. Information about security vulnerabilities affecting WebSphere Application Server has been published in security bulletins.	4 Dec 201814:25	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Rational ClearQuest (CVE-2018-1643)	30 Jan 201919:35	–	ibm
IBM Security Bulletins	Security Bulletin: Cross-site scripting vulnerability in WebSphere Application Server affects IBM Spectrum Control (formerly Tivoli Storage Productivity Center) (CVE-2018-1643)	22 Feb 202219:59	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Case Manager (CVE-2018-1643)	3 Jan 201900:00	–	ibm

NVD

Vulners

Node

ibm websphere_application_serverRange7.0.0.0–7.0.0.45

ibm websphere_application_serverRange8.0.0.0–8.0.0.15

ibm websphere_application_serverRange8.5.0.0–8.5.5.13

ibm websphere_application_serverRange9.0.0.0–9.0.0.8

[
  {
    "product": "WebSphere Application Server",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "7.0"
      },
      {
        "status": "affected",
        "version": "8.0"
      },
      {
        "status": "affected",
        "version": "8.5"
      },
      {
        "status": "affected",
        "version": "9.0"
      }
    ]
  }
]

Source	Link
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/144588
securitytracker	www.securitytracker.com/id/1042088
securityfocus	www.securityfocus.com/bid/106032
ibm	www.ibm.com/support/docview.wss

21 Nov 2024 04:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 24.3

CVSS 36.1

EPSS0.00409

CWE-79