CVE-2021-38951

🗓️ 09 Dec 2021 17:00:30Reported by ibmType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 112 Views

IBM WebSphere App Server 7.0, 8.0, 8.5, and 9.0 - CPU DoS Vulnerabilit

Reporter	Title	Published	Views	Family All 44
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in WebSphere® Application Server shipped with IBM® Intelligent Operations Center (CVE-2021-38951)	21 Dec 202114:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified in IBM WebSphere Application Server used by IBM Rational ClearQuest	21 Dec 202107:51	–	ibm
IBM Security Bulletins	Security Bulletin: WebSphere Application Server which is bundled with IBM WebSphere Hybrid Edition is vulnerable to a Denial of Service (CVE-2021-38951)	5 Jan 202221:15	–	ibm
IBM Security Bulletins	Security Bulletin: Tivoli Netcool/OMNIBus Web GUI is vulnerable to a Denial of Service (CVE-2021-38951)	23 Dec 202112:48	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in embedded IBM WebSphere Application Server which is shipped with IBM Tivoli Netcool Configuration Manager (CVE-2021-38951)	20 Jan 202203:25	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server used by IBM Master Data Management	27 Apr 202210:23	–	ibm
IBM Security Bulletins	Security Bulletin: WebSphere Application Server is vulnerable to a Privilege Escalation vulnerability and affects Content Collector for Email	11 Mar 202208:12	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Tivoli Business Service Manager (CVE-2021-38951)	14 Dec 202109:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Identity Manager Virtual Appliance is vulnerable to arbitrary code execution due to Apache Log4j and other issues (CVE-2021-4104, CVE-2021-45046, CVE-2021-38951)	12 Aug 202217:43	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in WebSphere Application Server shipped with IBM Security Access Manager for Enterprise Single Sign-On (CVE-2021-38951)	14 Jan 202202:23	–	ibm

NVD

Vulners

Node

ibm websphere_application_serverMatch7.0

ibm websphere_application_serverMatch8.0

ibm websphere_application_serverMatch8.5

ibm websphere_application_serverMatch9.0

AND

hp hp-uxMatch-

ibm aixMatch-

ibm iMatch-

ibm z/osMatch-

linux linux_kernelMatch-

microsoft windowsMatch-

oracle solarisMatch--

[
  {
    "product": "WebSphere Application Server",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "7.0"
      },
      {
        "status": "affected",
        "version": "8.0"
      },
      {
        "status": "affected",
        "version": "8.5"
      },
      {
        "status": "affected",
        "version": "9.0"
      }
    ]
  }
]

Source	Link
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/211405
ibm	www.ibm.com/support/pages/node/6524674

21 Nov 2024 06:18Current

7.3High risk

Vulners AI Score7.3

CVSS 25

CVSS 3.17.5

CVSS 37.5

EPSS0.00641