CVE-2021-39038

🗓️ 24 Feb 2022 17:10:13Reported by ibmType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 100 Views

IBM WebSphere App Server 9.0 & Liberty 17.0.0.3-22.0.0.2 remote click hijacking vulnerabilit

Reporter	Title	Published	Views	Family All 57
IBM Security Bulletins	Security Bulletin: Vulnerability in WebSphere Liberty affecting Watson Knowledge Catalog for IBM Cloud Pak for Data	9 Jun 202218:07	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Case Manager (CVE-2021-39038)	7 Mar 202221:06	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Asset and Service Management (CVE-2021-39038)	22 Mar 202219:21	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of IBM WebSphere Application Server Liberty, IBM Cloud Pak for Multicloud Management Monitoring is vulnerable to multiple vulnerabilities.	5 Sep 202310:56	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability has been identified in IBM WebSphere Application Server traditional and Liberty profile shipped with IBM Business Automation Workflow and IBM Business Process Manager (CVE-2021-39038)	14 Sep 202215:28	–	ibm
IBM Security Bulletins	Security Bulletin:IBM WebSphere Application Server and IBM WebSphere Application Server Liberty, which are bundled with IBM WebSphere Hybrid Edition, are vulnerable to Clickjacking (CVE-2021-39038)	24 Feb 202216:37	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Security Directory Server	11 Oct 202218:08	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Tivoli Federated Identity Manager	5 May 202219:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Controller has addressed multiple vulnerabilities	2 Dec 202219:43	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager (CVE-2021-39038)	11 Apr 202211:55	–	ibm

NVD

Vulners

Node

ibm websphere_application_serverRange9.0.0.0–9.0.5.12

ibm websphere_application_serverRange17.0.0.3–22.0.0.2liberty

[
  {
    "product": "WebSphere Application Server Liberty",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "17.0.0.3"
      },
      {
        "status": "affected",
        "version": "22.0.0.2"
      }
    ]
  },
  {
    "product": "WebSphere Application Server",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "9.0"
      }
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/pages/node/6559044
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/213968

21 Nov 2024 06:18Current

5.5Medium risk

Vulners AI Score5.5

CVSS 23.5

CVSS 3.15.4

CVSS 34.4

EPSS0.00039

CWE-1021