CVE-2018-1793

🗓️ 03 Oct 2018 14:00:00Reported by ibmType

IBM WebSphere App Server 7.0, 8.0, 8.5, 9.0 SAML ear XSS vulnerabilit

Reporter	Title	Published	Views	Family All 29
IBM Security Bulletins	Security Bulletin: Cross-site scripting vulnerability in SAML ear in WebSphere Application Server shipped with Jazz for Service Management (CVE-2018-1793)	28 Mar 201910:35	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is shipped with, or a required product for, IBM Tivoli Netcool Configuration Manager (CVE-2018-1793)	28 Jun 202322:08	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Case Manager (CVE-2018-1793)	7 Nov 201821:35	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Security Identity Manager (CVE-2018-1793)	25 Oct 201818:45	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in WebSphere Application Server shipped with WebSphere Remote Server (CVE-2018-1770), (CVE-2018-7810), (CVE-2018-1793), (CVE-2018-1794), (CVE-2018-1777)	21 Oct 201819:50	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise (CVE-2018-1793)	11 Dec 201811:20	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in WebSphere Application Server affect IBM Rational products based on IBM Jazz technology	28 Apr 202118:35	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Tivoli Security Policy Manager (CVE-2018-1793)	29 Nov 201815:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM WebSphere Application Server shipped with Asset and Service Management	29 Oct 201819:35	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities have been Identified in Websphere Application Server Shipped with Predictive Customer Intelligence (CVE-2018-1793, CVE-2018-1794, CVE-2018-1777)	11 Feb 202021:31	–	ibm

NVD

Vulners

Node

ibm websphere_application_serverMatch7.0

ibm websphere_application_serverMatch8.0

ibm websphere_application_serverMatch8.5

ibm websphere_application_serverMatch9.0

[
  {
    "product": "WebSphere Application Server",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "7.0"
      },
      {
        "status": "affected",
        "version": "8.0"
      },
      {
        "status": "affected",
        "version": "8.5"
      },
      {
        "status": "affected",
        "version": "9.0"
      }
    ]
  }
]

Source	Link
securitytracker	www.securitytracker.com/id/1041801
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/148948
ibm	www.ibm.com/support/docview.wss

21 Nov 2024 04:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 24.3

CVSS 36.1

EPSS0.00301

CWE-79