CVE-2022-22310

🗓️ 19 Jan 2022 16:55:11Reported by ibmType

IBM WebSphere App Server Liberty 21.0.0.10-21.0.0.12 has security weakness allowing unauthorized access to JAX-WS apps. CVE-2022-2231

Reporter	Title	Published	Views	Family All 29
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty shipped with IBM WebSphere Application Server Patterns is vulnerable to an Information Disclosure (CVE-2022-22310)	28 Jan 202221:31	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server Liberty shipped with IBM Digital Business Automation Workflow family products (CVE-2022-22310)	14 Sep 202215:28	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in WebSphere Liberty affecting Watson Knowledge Catalog for IBM Cloud Pak for Data	9 Jun 202218:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty is vulnerable to an Information Disclosure (CVE-2022-22310)	18 Jan 202218:44	–	ibm
IBM Security Bulletins	Security Bulletin: Liberty for Java for IBM Cloud is vulnerable to an Information Disclosure (CVE-2022-22310)	7 Oct 202216:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA - Vulnerabilities addressed in IBM® License Key Server	16 Oct 202407:14	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified in IBM WebSphere Application Liberty profile shipped with IBM Robotic Process Automation	18 Jul 202221:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, is vulnerable to an Information Disclosure (CVE-2022-22310)	15 Feb 202221:10	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in multiple dependencies affect IBM MessageGateway/ MessageSight	29 Apr 202502:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server Liberty for IBM i is affected by arbitrary code execution and other attacks due to multiple vulnerabilities.	31 Mar 202215:20	–	ibm

NVD

Vulners

Node

ibm websphere_application_serverRange21.0.0.10–21.0.0.12liberty

AND

apple macosMatch-

hp hp-uxMatch-

ibm aixMatch-

ibm iMatch-

ibm z/osMatch-

linux linux_kernelMatch-

microsoft windowsMatch-

oracle solarisMatch--

[
  {
    "product": "WebSphere Application Server Liberty",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "21.0.0.10"
      },
      {
        "status": "affected",
        "version": "21.0.0.12"
      }
    ]
  }
]

Source	Link
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/217224
ibm	www.ibm.com/support/pages/node/6541530

21 Nov 2024 06:46Current

6.4Medium risk

Vulners AI Score6.4

CVSS 26.4

CVSS 3.16.5

CVSS 34.8

EPSS0.00242