EUVD-2018-12298

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

IBM WebSphere Application Server may allow downgrade of TLS, enabling man-in-the-middle attacks.

Reporter	Title	Published	Views	Family All 37
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise (CVE-2018-1719)	24 Jul 201916:30	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Digital Business Automation Workflow family products (CVE-2018-1719)	14 Sep 202215:02	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM Websphere Application Server shipped with IBM Security Directory Server (CVE-2018-1643, CVE-2018-1719)	25 Jan 201916:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security vulnerabilities have been identified in IBM WebSphere Application Server shipped with Tivoli Access Manager for e-business	29 Jan 201921:45	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with WebSphere Remote Server (CVE-2018-1719)	19 Sep 201817:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been addressed in IBM Security Privileged Identity Manager	19 Sep 201900:41	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with WebSphere Service Registry and Repository (CVE-2018-1719)	18 Sep 201815:35	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager (CVE-2018-1719)	17 Jan 202317:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities have been fixed in IBM Security Privileged Identity Manager Appliance.	17 Sep 201915:34	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is a required product for, IBM Tivoli Network Manager IP Edition (CVE-2018-1719)	28 Jun 202322:07	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "949a177b-b937-3a8d-b346-dc07e6c29504",
        "vendor": {
          "name": "IBM"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "588deb73-671b-36a4-9e7e-72978566fd45",
        "product": {
          "name": "WebSphere Application Server"
        },
        "product_version": "9.0"
      },
      {
        "id": "6c0d945e-31c4-321c-8188-9c15c884c3cb",
        "product": {
          "name": "WebSphere Application Server"
        },
        "product_version": "8.5"
      }
    ]
  }
]

Source	Link
securitytracker	www.securitytracker.com/id/1041718
ibm	www.ibm.com/support/docview.wss
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/147292
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6Medium risk

Vulners AI Score6

CVSS 35.9

CVSS 24.3

EPSS0.00242