CVE-2022-38712

🗓️ 03 Nov 2022 00:00:00Reported by ibmType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 88 Views

IBM WebSphere App Server allows man-in-the-middle attacker to conduct SOAPAction spoofin

Reporter	Title	Published	Views	Family All 35
IBM Security Bulletins	Security Bulletin: WebSphere Application Server is vulnerable to SOAPAction spoofing when processing JAX-WS Web Services requests which affects Content Collector for Email	13 Dec 202214:52	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Business Monitor (CVE-2022-38712)	18 Oct 202209:08	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Case Manager (CVE-2022-38712)	19 Oct 202221:19	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is a required product for IBM Tivoli Netcool Configuration Manager (CVE-2022-38712)	1 Dec 202211:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server shipped with Jazz for Service Management (JazzSM) is vulnerable to SOAPAction spoofing (CVE-2022-38712)	19 Jul 202304:31	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Asset and Service Management (CVE-2022-38712)	18 Oct 202215:20	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager (CVE-2022-38712)	3 Jan 202315:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server, which is bundled in IBM WebSphere Hybrid Edition, is vulnerable to SOAPAction spoofing (CVE-2022-38712)	3 Nov 202215:38	–	ibm
IBM Security Bulletins	Security Bulletin: WebSphere Application Server shipped with IBM Security Access Manager for Enterprise Single Sign-On is vulnerable to SOAPAction spoofing (CVE-2022-38712)	8 Nov 202202:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Tivoli Composite Application Manager for Application Diagnostics Installed WebSphere Application Server is vulnerable to SOAPAction spoofing when processing JAX-WS Web Services requests (CVE-2022-38712)	6 Dec 202215:23	–	ibm

NVD

Vulners

Node

ibm websphere_application_serverRange7.0.0.0–7.0.0.45

ibm websphere_application_serverRange8.0.0.0–8.0.0.15

ibm websphere_application_serverRange8.5.0.0–8.5.5.23

ibm websphere_application_serverRange9.0.0.0–9.0.5.14

AND

hp hp-uxMatch-

ibm aixMatch-

ibm iMatch-

ibm z/osMatch-

linux linux_kernelMatch-

microsoft windowsMatch-

oracle solarisMatch--

[
  {
    "vendor": "n/a",
    "product": "IBM WebSphere Application Server",
    "versions": [
      {
        "version": "\"7.0, 8.0, 8.5, and 9.0\"",
        "status": "affected"
      }
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/pages/node/6829907

02 May 2025 21:15Current

5.5Medium risk

Vulners AI Score5.5

CVSS 3.15.9

EPSS0.00073

SSVC

CWE-290