EUVD-2017-10519

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

IBM WebSphere Application Server is vulnerable to HTTP response splitting attacks allowing exploitation.

Reporter	Title	Published	Views	Family All 24
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in Websphere Application Server shipped with Predictive Customer Intelligence (CVE-2017-1503)	11 Feb 202021:31	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with WebSphere Remote Server (CVE-2017-1503)	15 Jun 201807:08	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Business Process Manager, WebSphere Process Server, WebSphere Enterprise Service Bus, and WebSphere Lombardi Edition (CVE-2017-1503)	15 Sep 202219:29	–	ibm
IBM Security Bulletins	Security Bulletin: WebSphere Application Server shipped with Jazz for Service Management(JazzSM) Edge Caching Proxy may be vulnerable to HTTP response splitting (CVE-2017-1503)	17 Jun 201815:49	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Tivoli Federated Identity Manager and IBM Tivoli Federated Identity Manager Business Gateway (CVE-2017-1503)	16 Jun 201822:04	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with OpenPages GRC Platform (CVE-2017-1503)	15 Jun 201823:48	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in WebSphere Application Server shipped with Financial Transaction Manager (CVE-2017-1503)	16 Jun 201820:12	–	ibm
IBM Security Bulletins	WebSphere Application Server and IBM HTTP Server Security Bulletin List	13 Jul 202218:04	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Asset and Service Management (CVE-2017-1503)	17 Jun 201815:47	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM Websphere Application Server shipped with IBM Security/Tivoli Directory Server (CVE-2017-1503)	16 Jun 201822:03	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "a98a9e0d-0848-35d6-931e-6ab5fd551d08",
        "vendor": {
          "name": "IBM"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "01d3a418-9677-3a07-814b-3351ab2e94f6",
        "product": {
          "name": "IBM WebSphere Application Server"
        },
        "product_version": "7.0, 8.0, 8.5, 9.0"
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/101234
securitytracker	www.securitytracker.com/id/1039521
www-01	www.www-01.ibm.com/support/docview.wss
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/129578
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.5Medium risk

Vulners AI Score6.5

CVSS 36.1

CVSS 24.3

EPSS0.00277