CVE-2018-1695

🗓️ 06 Sep 2018 14:00:00Reported by ibmType

IBM WebSphere App Server installations may be vulnerable to spoofing attacks through form login.

Reporter	Title	Published	Views	Family All 38
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Security Directory Server (CVE-2018-1695)	12 Sep 201816:46	–	ibm
IBM Security Bulletins	Security Bulletin: Potential spoofing attack in WebSphere Application Server (CVE-2018-1695)	6 Mar 201920:30	–	ibm
IBM Security Bulletins	Security Bulletin: Potential spoofing attack in WebSphere Application Server shipped with Jazz for Service Management (CVE-2018-1695)	23 Nov 201810:15	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Digital Business Automation Workflow family products (CVE-2018-1695)	14 Sep 202215:02	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with IBM Intelligent Operations Center (CVE-2018-1695)	31 Oct 201812:25	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is shipped with IBM Tivoli Network Manager IP Edition (CVE-2018-1695)	28 Jun 202322:07	–	ibm
IBM Security Bulletins	Security Bulletin: Potential spoofing attack in WebSphere Application Server shipped with IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise (CVE-2018-1695)	11 Dec 201807:20	–	ibm
IBM Security Bulletins	Security Bulletin: Potential spoofing attack in WebSphere Application Server affects IBM Spectrum Control (formerly Tivoli Storage Productivity Center) (CVE-2018-1695)	22 Feb 202219:59	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in WebSphere Application Server shipped with Financial Transaction Manager (CVE-2018-1695)	21 Sep 201816:10	–	ibm
IBM Security Bulletins	Security Bulletin: Content Collector for Email is affected by spoofing attack vulnerability in WAS Logout Form	26 Nov 201810:15	–	ibm

NVD

Vulners

Node

ibm websphere_application_serverMatch7.0.0.0

ibm websphere_application_serverMatch8.0.0.0

ibm websphere_application_serverMatch8.5.5.0

[
  {
    "product": "WebSphere Application Server",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "7.0"
      },
      {
        "status": "affected",
        "version": "8.0"
      },
      {
        "status": "affected",
        "version": "8.5.5"
      }
    ]
  }
]

Source	Link
securitytracker	www.securitytracker.com/id/1041643
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/145769
www-01	www.www-01.ibm.com/support/docview.wss

21 Nov 2024 04:00Current

5.5Medium risk

Vulners AI Score5.5

CVSS 35.6 - 7.3

CVSS 26.8

EPSS0.00474

CWE-290