EUVD-2017-10167

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

IBM WebSphere Application Server vulnerability allows privilege escalation via OpenID Connect configuration.

Reporter	Title	Published	Views	Family All 33
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in Websphere Application Server shipped with Predictive Customer Intelligence (CVE-2016-0360, CVE-2017-1151)	11 Feb 202021:31	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in WebSphere Application Server shipped with Financial Transaction Manager (CVE-2017-1151)	16 Jun 201820:08	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in WebSphere Application Server that ships with Rational Asset Manager (CVE-2017-1151, CVE-2017-1137, CVE-2017-1194)	17 Jun 201805:21	–	ibm
IBM Security Bulletins	Security Bulletin: A Security vulnerability has been identified in IBM WebSphere Application Server bundled with IBM WebSphere Application Server Patterns and IBM WebSphere Application Server for Cloud (CVE-2016-1151)	15 Jun 201807:07	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with OpenPages GRC Platform (CVE-2017-1151)	15 Jun 201822:48	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Case Manager (CVE-2017-1151)	17 Jun 201812:17	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager (CVE-2017-1151)	17 Jun 201815:37	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Asset and Service Management (CVE-2017-1151)	22 Sep 202203:02	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with WebSphere Enterprise Service Bus (CVE-2017-1151)	15 Jun 201807:07	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Integrated Information Core (CVE-2017-1151)	17 Jun 201822:28	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "a15c4967-483f-3085-9da7-aa7d842a54f1",
        "vendor": {
          "name": "IBM Corporation"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "10144ed0-b140-32fc-bba4-790e75b19a41",
        "product": {
          "name": "WebSphere Application Server"
        },
        "product_version": "8.5"
      },
      {
        "id": "96018d77-1971-3084-971a-6eb31d26316a",
        "product": {
          "name": "WebSphere Application Server"
        },
        "product_version": "9.0"
      },
      {
        "id": "a5cf68da-38d2-370b-9a5e-016406979e24",
        "product": {
          "name": "WebSphere Application Server"
        },
        "product_version": "8.5.5"
      },
      {
        "id": "d64f1d0e-1b5e-349e-ae2a-cae967a18893",
        "product": {
          "name": "WebSphere Application Server"
        },
        "product_version": "8.0"
      }
    ]
  }
]

Source	Link
securitytracker	www.securitytracker.com/id/1037984
ibm	www.ibm.com/support/docview.wss
securityfocus	www.securityfocus.com/bid/96841
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

8High risk

Vulners AI Score8

CVSS 38.1

CVSS 26.8

EPSS0.00558