EUVD-2017-10517

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

IBM WebSphere Application Server may have weaker security after updating web services settings via Admin Console.

Reporter	Title	Published	Views	Family All 40
IBM Security Bulletins	Multiple vulnerabilities have been identified in WebSphere Application Server shipped with WebSphere Service Registry and Repository (CVE-2017-1380, CVE-2017-1381, CVE-2017-1382, CVE-2017-1501)	15 Jun 201807:07	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Case Manager (CVE-2017-1501)	25 Jun 201805:54	–	ibm
IBM Security Bulletins	Security Bulletins for Emptoris Program Management	8 Dec 201816:15	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with OpenPages GRC Platform (CVE-2017-1501)	15 Jun 201823:48	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities affect IBM WebSphere Application Server for Bluemix	15 Jun 201807:08	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in WebSphere Application Server shipped with Financial Transaction Manager (CVE-2017-1501)	16 Jun 201820:12	–	ibm
IBM Security Bulletins	Security Bulletins for Emptoris Spend Analysis	8 Dec 201815:10	–	ibm
IBM Security Bulletins	Security Bulletins for Emptoris Contract Management	8 Dec 201816:15	–	ibm
IBM Security Bulletins	Security Bulletin: A Security vulnerability has been identified in IBM WebSphere Application Server bundled with IBM WebSphere Application Server Patterns and IBM WebSphere Application Server for Cloud (CVE-2017-1501 )	15 Jun 201807:07	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Tivoli Federated Identity Manager and IBM Tivoli Federated Identity Manager Business Gateway	16 Jun 201822:02	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "5e75b805-e240-3691-9c8c-5c78983a81d3",
        "vendor": {
          "name": "IBM"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "07abb8fb-a0d7-3322-a8a5-2da3b43f18d4",
        "product": {
          "name": "WebSphere Application Server"
        },
        "product_version": "8.5"
      },
      {
        "id": "c9390f85-2039-3f15-89e5-92fe89e8cef9",
        "product": {
          "name": "WebSphere Application Server"
        },
        "product_version": "8.0"
      },
      {
        "id": "dfbb37e9-c3bf-3b6d-b069-949a4bd2c285",
        "product": {
          "name": "WebSphere Application Server"
        },
        "product_version": "9.0"
      }
    ]
  }
]

Source	Link
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/129576
ibm	www.ibm.com/support/docview.wss
securityfocus	www.securityfocus.com/bid/100394
securitytracker	www.securitytracker.com/id/1039199
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6Medium risk

Vulners AI Score6

CVSS 35.9

CVSS 24.3

EPSS0.00701

ibm websphere security weakness admin console update