EUVD-2022-41706

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

IBM WebSphere Application Server versions may allow spoofing attacks via man-in-the-middle vulnerability.

Reporter	Title	Published	Views	Family All 45
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM HTTP Server shipped with IBM Rational ClearCase [CVE-2022-39161]	15 Jun 202310:54	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in IBM WebSphere Application Server affect IBM Cloud Pak System [CVE-2022-39161]	31 Jul 202421:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Tivoli Monitoring included WebSphere Application Server and IBM HTTP Server used by WebSphere Application Server	31 Aug 202319:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server shipped with IBM Security Access Manager for Enterprise Single Sign-On is vulnerable to spoofing when using Web Server Plug-ins (CVE-2022-39161)	19 May 202305:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Rational ClearCase ( CVE-2023-24966, CVE-2022-39161, CVE-2023-27554, CVE-2023-24998)	15 Jun 202311:05	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server used by IBM Rational ClearQuest (CVE-2022-39161)	24 May 202312:19	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in embedded IBM WebSphere Application Server which is shipped with IBM Tivoli Netcool Configuration Manager (CVE-2022-39161)	27 Jun 202307:54	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is a required product for IBM Tivoli Netcool Configuration Manager (CVE-2022-39161)	27 Jun 202307:53	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM HTTP Server shipped with IBM WebSphere Application Server used by IBM Rational ClearQuest (CVE-2022-39161)	24 May 202312:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server shipped with Jazz for Service Management (JazzSM) is vulnerable to spoofing when using Web Server Plug-ins (CVE-2022-39161)	18 Jul 202318:23	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "ded9464c-37a9-3b82-8526-e8aa7b554b96",
        "vendor": {
          "name": "IBM"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "8ce2f8db-3025-3fcd-ae48-541f3ec358d1",
        "product": {
          "name": "WebSphere Application Server"
        },
        "product_version": "7.0, 8.0, 8.5, 9.0, Liberty"
      }
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/pages/node/6987779
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/235069

03 Oct 2025 20:07Current

5.4Medium risk

Vulners AI Score5.4

CVSS 3.14.8 - 5.3

EPSS0.00057

SSVC