EUVD-2017-10599

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

IBM WebSphere Application Server could allow remote attackers to obtain sensitive information via errors.

Reporter	Title	Published	Views	Family All 33
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server that is shipped with IBM Rational ClearQuest (CVE-2017-1583, CVE-2011-4343)	4 Feb 202016:40	–	ibm
IBM Security Bulletins	Security Bulletin: A Security vulnerability has been identified in IBM WebSphere Application Server bundled with IBM WebSphere Application Server Patterns and IBM WebSphere Application Server for Cloud (CVE-2017-1583, CVE-2011-4343)	15 Jun 201807:08	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified in WebSphere Application Server shipped with IBM Cloud Orchestrator and Cloud Orchestrator Enterprise (CVE-2017-1583 )	17 Jun 201822:33	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities affect IBM WebSphere Application Server for Bluemix	15 Jun 201807:08	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities has been identified in IBM WebSphere Application Server shipped with IBM Case Manager (CVE-2017-1583, CVE-2011-4343)	17 Jun 201812:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect Java Server Faces (JSF) used by WebSphere Application Server (CVE-2017-1583, CVE-2011-4343)	15 Jun 201807:08	–	ibm
IBM Security Bulletins	Multiple vulnerabilities have been identified in WebSphere Application Server shipped with WebSphere Service Registry and Repository (CVE-2017-1583, CVE-2011-4343)	15 Jun 201807:08	–	ibm
IBM Security Bulletins	Security Bulletin: Content Collector for Email is affected by vulnerability due to information disclosure in MyFaces for WebSphere Application Server	17 Jun 201812:19	–	ibm
IBM Security Bulletins	Security Bulletin: Information disclosure in WebSphere Application Server Liberty affects IBM MessageSight (CVE-2017-1583)	17 Jun 201815:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in WebSphere Application Server affect IBM Business Process Manager (BPM) (CVE-2017-1583, CVE-2011-4343)	15 Sep 202219:27	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "165653d5-d9b3-3c49-9a30-0b81358fb5f7",
        "vendor": {
          "name": "IBM"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "79990dec-f069-338a-b5d8-d8854537a6a8",
        "product": {
          "name": "Liberty for Java for Bluemix"
        },
        "product_version": "3.13"
      }
    ]
  }
]

Source	Link
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/132342
ibm	www.ibm.com/support/docview.wss
securityfocus	www.securityfocus.com/bid/101522
securitytracker	www.securitytracker.com/id/1039695
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

7.6High risk

Vulners AI Score7.6

CVSS 37.5

CVSS 25

EPSS0.0111