EUVD-2018-12193

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Vulnerabilities in IBM WebSphere allow information theft via malformed SAML responses from provider

Reporter	Title	Published	Views	Family All 36
IBM Security Bulletins	Security Bulletin: Information disclosure in WebSphere Application Server with SAML shipped with Jazz for Service Management (CVE-2018-1614)	23 Nov 201810:45	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities have been Identified in Websphere Application Server Shipped with Predictive Customer Intelligence (CVE-2012-5783, CVE-2018-1614, CVE-2014-0114, CVE-2015-0899)	11 Feb 202021:31	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities affect IBM WebSphere Application Server in IBM Cloud (CVE-2018-1614, CVE-2018-1621)	2 Oct 201820:20	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with WebSphere Remote Server (CVE-2018-1614)	23 Jun 201802:54	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is a required product for IBM Tivoli Netcool Configuration Manager (CVE-2018-1614).	28 Jun 202322:05	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with OpenPages GRC Platform (CVE-2018-1614)	21 Aug 201822:07	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Business Monitor (CVE-2018-1614)	6 Jul 201800:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in WebSphere Application Server affect IBM Rational products based on IBM Jazz technology	28 Apr 202118:35	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in the WebSphere Application Server where the RAM is deployed.	18 Jul 201810:28	–	ibm
IBM Security Bulletins	Security Bulletin: Information disclosure in WebSphere Application Server with SAML (CVE-2018-1614)	19 Feb 201918:00	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "3b820770-9934-3dc0-bf92-be7d91f828a7",
        "vendor": {
          "name": "IBM"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "24b24b24-114c-3a28-9cde-69e93d3cee48",
        "product": {
          "name": "WebSphere Application Server"
        },
        "product_version": "7.0"
      },
      {
        "id": "3206fd67-373f-380e-a040-f33cb554a588",
        "product": {
          "name": "WebSphere Application Server"
        },
        "product_version": "8.5"
      },
      {
        "id": "5a31ec62-817b-347a-92ff-595f16163c62",
        "product": {
          "name": "WebSphere Application Server"
        },
        "product_version": "8.0"
      },
      {
        "id": "dd92808f-9006-337b-bea0-27bc8b77f46b",
        "product": {
          "name": "WebSphere Application Server"
        },
        "product_version": "9.0"
      }
    ]
  }
]

Source	Link
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/144270
securitytracker	www.securitytracker.com/id/1041168
www-01	www.www-01.ibm.com/support/docview.wss
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.6Medium risk

Vulners AI Score6.6

CVSS 35.8 - 7.5

CVSS 25

EPSS0.00263