CVE-2022-22477

🗓️ 14 Jul 2022 16:25:23Reported by ibmType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 72 Views

IBM WebSphere AppServer 8.5/9.0 XSS Vuln. Embeds JS in Web UI, potential credentials disclosure

Reporter	Title	Published	Views	Family All 35
IBM Security Bulletins	Security Bulletin: A vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Buinses Automation Workflow and IBM Business Process Manager (CVE-2022-22477)	14 Sep 202215:28	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Asset and Service Management (CVE-2022-22477)	15 Jul 202223:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Tivoli Monitoring included WebSphere Application Server and IBM HTTP Server used by WebSphere Application Server	30 Dec 202217:56	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Case Manager (CVE-2022-22477)	14 Jul 202219:47	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Security Directory Server	11 Oct 202218:08	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Tivoli System Automation Application Manager (CVE-2022-22477)	8 Nov 202212:31	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with IBM Security Guardium Key Lifecycle Manager (GKLM) (CVE-2022-22477)	25 Jul 202208:44	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is a required product for IBM Tivoli Netcool Configuration Manager (CVE-2022-22477)	25 Nov 202211:14	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in WebSphere® Application Server shipped with IBM® Intelligent Operations Center (CVE-2022-22477)	21 Jul 202210:50	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server used by IBM Master Data Management	1 Nov 202214:44	–	ibm

NVD

Vulners

Node

ibm websphere_application_serverMatch8.5

ibm websphere_application_serverMatch9.0

AND

hp hp-uxMatch-

ibm aixMatch-

ibm iMatch-

ibm z/osMatch-

linux linux_kernelMatch-

microsoft windowsMatch-

oracle solarisMatch--

[
  {
    "product": "WebSphere Application Server",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "8.5"
      },
      {
        "status": "affected",
        "version": "9.0"
      }
    ]
  }
]

Source	Link
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/225605
ibm	www.ibm.com/support/pages/node/6603417

21 Nov 2024 06:46Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.16.1

CVSS 36.1

EPSS0.00532

CWE-79