EUVD-2017-10697

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

IBM WebSphere Application Server may allow unauthorized access to sensitive files due to request handling issues.

Reporter	Title	Published	Views	Family All 60
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with OpenPages GRC Platform (CVE-2017-1681)	15 Jun 201823:54	–	ibm
IBM Security Bulletins	Security Bulletin: Information disclosure in Liberty for Java for IBM Cloud (CVE-2017-1681, CVE-2013-6440)	15 Jun 201807:08	–	ibm
IBM Security Bulletins	Security Bulletin: Information disclosure in WebSphere Application Server bundled with IBM WebSphere Application Server Patterns and IBM WebSphere Application Server for Cloud (CVE-2017-1681)	15 Jun 201807:08	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with WebSphere Service Registry and Repository (CVE-2017-1681)	15 Jun 201807:08	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Tivoli Netcool/OMNIbus WebGUI (CVE-2017-1681)	17 Jun 201815:49	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with WebSphere Remote Server (CVE-2017-1681)	15 Jun 201807:08	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in IBM WebSphere Application Server Liberty affects the IBM Performance Management product (CVE-2017-1681)	17 Jun 201815:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Metrics Manager 2018 Q1 Security Update: IBM Cognos Metrics Manager is affected by multiple vulnerabilities.	15 Jun 201823:51	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is shipped with, or a required product for, IBM Tivoli Netcool Configuration Manager.	28 Jun 202322:03	–	ibm
IBM Security Bulletins	Security Bulletin: Information disclosure in WebSphere Application Server (CVE-2017-1681)	15 Jun 201807:08	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "ce42027f-3e73-30e8-8147-36f45ab7ff6a",
        "vendor": {
          "name": "IBM"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "209eb815-b14d-3d70-ab96-3cb3dafe9aa7",
        "product": {
          "name": "Liberty for Java for Bluemix"
        },
        "product_version": "3.15"
      }
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/docview.wss
securitytracker	www.securitytracker.com/id/1040357
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/134003
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

4.3Medium risk

Vulners AI Score4.3

CVSS 33.3

CVSS 22.1

EPSS0.00054