EUVD-2018-12346

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

IBM WebSphere Application Server Cachemonitor is vulnerable to cross-site scripting leading to credential disclosure

Reporter	Title	Published	Views	Family All 39
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with IBM Intelligent Operations Center (CVE-2018-1767)	31 Oct 201817:50	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager (CVE-2018-1767)	17 Jan 202317:36	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with WebSphere Remote Server (CVE-2018-1767)	1 Nov 201812:55	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Security Identity Manager (CVE-2018-1767)	29 Nov 201815:35	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in FileNet Content Management Interoperability Services (CMIS) shipped with IBM Case Manager (CVE-2018-1767)	3 Jan 201900:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in WebSphere Application Server affect IBM Rational products based on IBM Jazz technology	27 Nov 201819:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Websphere Vulnerabilities Impact IBM Control Center (CVE-2018-3169, CVE-2014-7810, CVE-2018-1767)	24 Jul 202022:19	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been addressed in IBM Security Privileged Identity Manager	19 Sep 201900:41	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is shipped with, or a required product for, IBM Tivoli Network Manager IP Edition (CVE-2018-1767)	28 Jun 202322:09	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities have been fixed in IBM Security Privileged Identity Manager Appliance.	17 Sep 201915:34	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "fa252b08-f993-3e4f-bbd5-a870c4e6ad1d",
        "vendor": {
          "name": "IBM"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "5aef7f5b-b933-38fc-9b44-edf9e186056e",
        "product": {
          "name": "WebSphere Application Server"
        },
        "product_version": "8.0"
      },
      {
        "id": "af4dd678-8fa4-301d-9246-a1179e41f2e9",
        "product": {
          "name": "WebSphere Application Server"
        },
        "product_version": "9.0"
      },
      {
        "id": "e15e9499-623e-3431-8c86-a1c50f7bebf4",
        "product": {
          "name": "WebSphere Application Server"
        },
        "product_version": "8.5"
      },
      {
        "id": "e90d11d8-44e1-31b2-a217-bc45177f75b1",
        "product": {
          "name": "WebSphere Application Server"
        },
        "product_version": "7.0"
      }
    ]
  }
]

Source	Link
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/148621
securitytracker	www.securitytracker.com/id/1041983
ibm	www.ibm.com/support/docview.wss
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.4Medium risk

Vulners AI Score6.4

CVSS 36.1

CVSS 24.3

EPSS0.00301