Lucene search
K

EUVD-2020-25668

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType 
euvd
 euvd
🔗 euvd.enisa.europa.eu👁 1 Views

IBM WebSphere Application Liberty versions 19.0.0.5 to 20.0.0.4 allows identity spoofing via openidconnect.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins
Security Bulletin: Vulnerabilities in IBM WebSphere Liberty affects IBM Waston Machine Learning Accelerator
18 Jan 202107:09
ibm
IBM Security Bulletins
Security Bulletin: Multiple Vulnerabilties in WebSphere Application Server shipped with IBM Cloud Pak System
7 Jul 202013:14
ibm
IBM Security Bulletins
Security Bulletin: Multiple vulnerabilities in the IBM HTTP Server and IBM WebSphere Application Server used in IBM WebSphere Application Server in IBM Cloud
16 Jun 202013:32
ibm
IBM Security Bulletins
Security Bulletin: Multiple vulnerabilities affect the IBM Performance Management product
26 Feb 202117:14
ibm
IBM Security Bulletins
Security Bulletin: WebSphere security vulnerability in IBM Content Foundation on Cloud
10 Nov 202022:38
ibm
IBM Security Bulletins
Security Bulletin: Websphere Application Server Liberty vulnerabilities used by IBM Streams
22 Jul 202021:38
ibm
IBM Security Bulletins
Security Bulletin: Multiple vulnerabilities in middleware software affect IBM Cloud Pak for Automation
27 Jun 202009:38
ibm
IBM Security Bulletins
Security Bulletin: Potential spoofing attack in Liberty for Java (CVE-2020-4421)
7 Oct 202216:01
ibm
IBM Security Bulletins
Security Bulletin: IBM Cloud Private is vulnerable to an IBM WebSphere Application Server Liberty vulnerability (CVE-2020-4421)
19 Aug 202019:03
ibm
IBM Security Bulletins
Security Bulletin: Potential spoofing attack in Webshere Application Server shipped with IBM WebSphere Application Server Patterns (CVE-2020-4421)
6 May 202020:51
ibm
Rows per page
[
  {
    "enisaIdVendor": [
      {
        "id": "5c9ec496-8da6-331d-a943-7c9584ba7502",
        "vendor": {
          "name": "IBM"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "df23fd61-6643-3d01-bb0c-b667c148f45d",
        "product": {
          "name": "WebSphere Application Server Liberty"
        },
        "product_version": "19.0.0.5"
      },
      {
        "id": "e2b56010-771a-340d-8e75-dec1a35c85fd",
        "product": {
          "name": "WebSphere Application Server Liberty"
        },
        "product_version": "20.0.0.4"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

07 Oct 2025 00:30Current
5.6Medium risk
Vulners AI Score5.6
CVSS 35
CVSS 3.15.4
CVSS 25.5
EPSS0.0017
1