CVE-2018-1797

🗓️ 16 Nov 2018 16:00:00Reported by ibmType

IBM WebSphere App Server 7.0, 8.0, 8.5, and 9.0 EBA Vulnerabilit

Reporter	Title	Published	Views	Family All 28
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in WebSphere Application Server affect IBM Rational products based on IBM Jazz technology	27 Nov 201819:45	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in WebSphere Application Server shipped with WebSphere Service Registry and Repository (CVE-2018-1797 and CVE-2018-1798)	28 Nov 201812:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security vulnerabilities have been identified in IBM WebSphere Application Server shipped with Tivoli Access Manager for e-business	29 Jan 201921:45	–	ibm
IBM Security Bulletins	Security Bulletin: WebSphere Application Server is shipped with WebSphere Remote Server. Information about security vulnerabilities affecting WebSphere Application Server has been published in security bulletins.	4 Dec 201814:25	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager (CVE-2018-1797)	17 Jan 202317:36	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Security Identity Manager (CVE-2018-1797)	7 Dec 201814:50	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities Affect IBM WebSphere Application Server in IBM Cloud	19 Dec 201816:50	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is a required product for IBM Tivoli Network Manager IP Edition (CVE-2018-1797)	28 Jun 202322:11	–	ibm
IBM Security Bulletins	WebSphere Application Server and IBM HTTP Server Security Bulletin List	13 Jul 202218:04	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is a required product for IBM Tivoli Netcool Configuration Manager (CVE-2018-1797)	28 Jun 202322:11	–	ibm

NVD

Vulners

Node

ibm websphere_application_serverRange7.0.0.0–7.0.0.45

ibm websphere_application_serverRange8.0.0.0–8.0.0.15

ibm websphere_application_serverRange8.5.0.0–8.5.5.14

ibm websphere_application_serverRange9.0.0.0–9.0.0.9

[
  {
    "product": "WebSphere Application Server",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "7.0"
      },
      {
        "status": "affected",
        "version": "8.0"
      },
      {
        "status": "affected",
        "version": "8.5"
      },
      {
        "status": "affected",
        "version": "9.0"
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/105982
ibm	www.ibm.com/support/docview.wss
securitytracker	www.securitytracker.com/id/1042146
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/149427

21 Nov 2024 04:00Current

5.6Medium risk

Vulners AI Score5.6

CVSS 24.3

CVSS 35.5 - 6.3

EPSS0.00425

CWE-22